Onboard administrator network settings screen – HP Onboard Administrator User Manual

Page 72

Advertising
background image

First Time Setup Wizard 72

Field

Possible value

Description

Search Context 6

All characters except "

(quotes), not to exceed 127
characters

Sixth searchable path used to locate the user

when the user is trying to authenticate using
directory services. The path is also used to

search for a nesting LDAP group.

Use NT Account Name Mapping (DOMAIN\username)—Select this check box to enable NT name
mapping. This field enables users to log in by using the NT domain\username format. The Onboard

Administrator may be optionally configured to search the Directory Server Global Catalog and locate
the authenticated user information and associated authorized groups. The standard Directory Server

GC SSL Port is 3269. This field is optional, and if left blank, the global catalog is not used.

IMPORTANT:

If NT Account Name Mapping is used with the global catalog, and the search

context is not restrictive enough, or the domain name is not specified, the Onboard Administrator

may associate the authenticated user with a user account that has the same name in a different
domain. The authenticated user would then receive the authorization of the user in the other

domain. To avoid ambiguity when logging on LDAP user, select search contexts or provide the

domain name.

NOTE:

If NT Account Name Mapping is used with the global catalog, and cannot be resolved

to a single user, then the user is not authorized to access the Onboard Administrator. This may

occur with search contexts that are not restrictive enough and if multiple accounts with the same
name exist in different domains. To avoid ambiguity, select search contexts.

NOTE:

Password rules enforced on LDAP servers might be different than password rules

enforced for local user accounts. Make sure both sets of rules adhere to security policies.

To apply settings, click Next.

Onboard Administrator Network Settings screen

To modify network settings for all the Onboard Administrator modules in the selected enclosures, use the

Onboard Administrator Network Settings IPv4 or IPv6 screens. Settings for Standby Onboard Administrator
modules only appear if the modules are present. Each screen allows you to configure network settings for the

Active Onboard Administrator and the Standby Onboard Administrator. You can change the following

settings:

Select the DHCP service to assign IP settings

Enable Dynamic DNS, which enables you to use a host name for the Onboard Administrator. The host
name is registered with DNS to maintain the association with the current dynamically assigned IP

address.

Manually assign a static IP address

The IPv4 screen allows you to enable either dynamically assigned IP addresses obtained from a DHCP server

or static IP addresses that you specify manually. The IPv6 screen allows you to enable both kinds of addresses
along with SLAAC.

Advertising