Page 3 - About This Document
Table of Contents About This Document ....................................................................................................... 15 Intended Audience................................................................................................................................15New and ...
Page 8 - Installing and Configuring Directory Services
Target: map1/group1................................................................................................................143Target: map1/group1/account#.................................................................................................143User Account Examples....................
Page 11 - List of Figures
List of Figures 2-1 OA/iLO Network Port and Components......................................................................................28 2-2 Onboard Administrator LEDs and Buttons..................................................................................28 2-3 HP Integrity rx2660 Server...
Page 13 - List of Tables
List of Tables 1 Publishing History Details............................................................................................................16 1-1 Supported Systems and Required Components Matrix...............................................................24 1-2 iLO 2 MP Supported Brows...
Page 16 - Table 1 Publishing History Details; Document Organization; This guide is divided into the following chapters.
Table 1 Publishing History Details Publication Date Supported Servers Operating Systems Supported Document Manufacturing Part Number January 2008 BL870c BL860c rx2660 rx3600 rx6600 rx7640 1 rx8640 1 Superdome sx2000 1 HP-UX 11i v2 OpenVMS 8.3 1H1 Microsoft Windows Server 2003 Red Hat Linux and SuSE ...
Page 17 - Command; Ctrl; Related Information; HP Technical Documentation Website
Chapter 5 Configuring DHCP, DNS, LDAP, and LDAP Lite Use this chapter to configureDHCP, DNS, LDAP extended schema, and LDAP Lite default schema. Chapter 6 Using the iLO 2 MP This chapter provides information on the different interfacesyou can use to interact with the iLO 2 MP such as text user inter...
Page 18 - Website for HP Technical Support; Books about HP-UX Published by Prentice Hall; HP-UX 11i System Administration Handbook; Warranty Information
Windows Operating System Information Find information about administration of the Microsoft Windows operating system at thefollowing websites • http://www.docs.hp.com/windows_nt/ • http://www.microsoft.com/technet/ Diagnostics and Event Monitoring: Hardware Support Tools Complete information about H...
Page 19 - Introduction to iLO 2 MP; This chapter addresses the following topics:; Console access; Standard Features
1 Introduction to iLO 2 MP The Integrated Lights-Out Management Processor (iLO MP) for entry class Integrity servers isan autonomous management subsystem embedded directly on the server. It is the foundationof the server ’s High Availability (HA) embedded server and fault management. It also provide...
Page 22 - Advanced Features; “Advanced Pack License”
SNMP The SNMP is part of the TCP/IP protocol suit developed to manage servers on an IP network.SNMP enables you to manage network performance, find and solve network problems, and planfor network growth. SMASH Server Management Architecture for Server Hardware (SMASH) is an initiative by the Distrib...
Page 23 - LDAP Lite; Minimal maintenance and administration; Power Meter Readings; Information on HP IPM is available at:
logging in to the iLO 2 MP and authorization is given each time an iLO 2 MP command runs.This provides a centralized database (LDAP server) of all user accounts and avoids the overheadof creating users in each iLO 2 MP. Directory authentication occurs by enabling Extended Schema or Default Schema. W...
Page 24 - Obtaining and Activating iLO 2 MP Advanced Pack Licensing; For more information, see the HP website at:; Supported Systems and Required Components and Cables; that are required to operate the iLO 2 MP.; iLO 2 MP Supported Browsers and Client Operating Systems
IMPORTANT: On HP Integrity server blades, the Advanced Pack license is standard. Remember to save the Advanced Pack license key information that was provided by HP. If you ever needto replace your server blade under warranty, you will need to transfer the key by typing the codeon the replacement ser...
Page 25 - Table 1-2 iLO 2 MP Supported Browsers and Client Operating Systems; Security
Table 1-2 iLO 2 MP Supported Browsers and Client Operating Systems Client Operating System Browsers OpenVMS Linux Windows HP-UX Java Plug-in 1.5.0_08 8.3 SuSE Red Hat Enterprise XP WS 2003 Enterprise 11i 23/11.31 X X X X X Firefox 2.0.0.4 X X Internet Explorer 6.0 X HP Secure Web Browser 1.7.13 Rela...
Page 26 - by pressing the power button for longer than four seconds.; Protecting SNMP Traffic; using SSH instead of telnet because SSH uses encryption.
Because iLO 2 MP devices are completely autonomous and can be used to control the server,treat them the same as other servers. For example, include the iLO 2 MP devices in the securityand network audits. IMPORTANT: Ensure that physical access to the server is limited. Anyone can clear passwords by p...
Page 27 - Ports and LEDs; You can find other Onboard Administrator docs on the HP website at:; HP BladeSystem c-Class Onboard Administrator; Onboard Administrator
2 Ports and LEDs All iLO 2 MP functions are available through the server iLO 2 MP LAN port and the local andremote serial ports. On HP Integrity server blades, all iLO 2 MP functions are available on theOnboard Administrator. This chapter describes the available iLO 2 MP ports, connectors, andLEDs o...
Page 29 - Figure 2-3 HP Integrity rx2660 Server Rear View
HP Integrity rx2660 Server Components Figure 2-3 shows the rear view of the HP Integrity rx2660 server. The system LAN functionality is integrated into the system board. Figure 2-3 HP Integrity rx2660 Server Rear View 10 iLO 2 MP LAN Port 6 Auxiliary Serial Port 1 Power Supply 1 and LED 2 Power Supp...
Page 30 - iLO 2 MP Status LEDs; lists the state of the iLO 2 MP status LEDs during normal operation.
NOTE: This figure is oriented vertically to match the orientation of the core I/O board. Figure 2-4 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs 5 3 USB 2.0 Ports (any USBdevice) 1 iLO 2 MP Serial ConsolePort (RS-232) (DB-9F to VGA Port (No iLO 2 MPaccess; EFI only) DB-9F cable) Connect...
Page 31 - Table 2-1 iLO 2 MP Status LEDs; iLO 2 MP Reset Button; Resetting Local User Accounts and Passwords to Default Values; Console Serial Port and Auxiliary Serial Port; Table 2-2 Console Serial Port Pinouts
Table 2-1 iLO 2 MP Status LEDs (continued) LED State iLO 2 MP Status LED Flashing green. iLO 2 MP Heartbeat Flashing green. BMC Heartbeat iLO 2 MP Reset Button The iLO 2 MP Reset button enables you to reset the iLO 2 MP and reset the user-specific valuesto factory default values. A momentary press c...
Page 32 - iLO 2 MP LAN Port; shows the iLO 2 MP LAN port connector pins and LEDs.; Table 2-3 iLO 2 MP LAN Port Pinouts; iLO 2 MP LAN LEDs; lists the iLO 2 MP LAN link status LEDs and states.
Table 2-2 Console Serial Port Pinouts (continued) Signal Description Pin Number Requests to send 7 Clears to send 8 Not used 9 iLO 2 MP LAN Port Figure 2-6 shows the iLO 2 MP LAN port connector pins and LEDs. Figure 2-6 iLO 2 MP LAN Port Amber Green 8 1 Table 2-3 maps the iLO 2 MP LAN port connector...
Page 33 - Setting Up and Connecting the Console; iLO 2 MP LAN port
3 Setting Up and Connecting the Console To set up the console, follow these steps:1. Determine the physical access method to connect cables. There are two physical connectionsto the Integrity iLO 2 MP:• Console serial port (RS-232) • iLO 2 MP LAN port 2. Configure the Integrity iLO 2 MP and assign a...
Page 34 - Setup Checklist; Use the checklist in
Setup Checklist Use the checklist in Table 3-1 to help set up iLO 2 MP. Table 3-1 Setup Checklist X Action Step Standard 1. Determine the access method to select and connect cables. 2. Determine the LAN configuration method and assign an IP address if necessary. Prepare 1 Choose a method to configur...
Page 35 - Figure 3-1 Setup Flowchart
Setup Flowchart Use this console setup flowchart as a guide to help set up the Integrity iLO 2 MP. Figure 3-1 Setup Flowchart Setup Flowchart 35
Page 36 - Preparing to Set Up iLO 2 MP; Determining the Physical iLO 2 MP Access Method; Table 3-2 Physical Connection Matrix; Determining the iLO 2 MP LAN Configuration Method; Table 3-3 LAN Configuration Methods
Preparing to Set Up iLO 2 MP Perform the following tasks before you configure the iLO 2 MP LAN:• Determine the physical access method to select and connect cables. • Determine the iLO 2 MP LAN configuration method and assign an IP address if necessary. Determining the Physical iLO 2 MP Access Method...
Page 37 - You are using a DHCP server that provides the domain name.; Configuring the iLO 2 MP LAN Using ARP Ping
Configuring the iLO 2 MP LAN Using DHCP and DNS DHCP automatically configures all DHCP-enabled servers with IP addresses, subnet masks, andgateway addresses. All HP Integrity entry class servers with the iLO 2 MP are shipped from thefactory with DHCP enabled. HP recommends using the DHCP and DNS met...
Page 38 - ping
ARP Ping has the following operational issues:• The PC and the server must be on the same physical subnet. • When a new server is first booted, DHCP is automatically available (factory-set default),but ARP Ping does not start until three minutes after the iLO 2 MP is booted. This appliesto every sub...
Page 39 - LC; LC; Enter
ping 192.0.2.1 7. Use this IP address to connect to the iLO 2 MP LAN. 8. Use web or telnet access to connect to the iLO 2 MP from a host on the local subnet andconfigure the rest of the LAN parameters (gateway, subnet). Configuring the iLO 2 MP LAN Using the Console Serial Port The terminal emulatio...
Page 40 - CM; Logging In to the iLO 2 MP; “Modifying User Accounts and Default Passwords” (page 46); Physically Connecting the Server Blade to the iLO 2 MP
9. Use the LC command to enter information for the IP address, host, subnet mask, gateway parameters, and so on. 10. Enter XD -R -NC to reset the iLO 2 MP. 11. After the iLO 2 MP resets, log in to the iLO 2 MP again and enter CM at the MP> prompt. 12. To confirm that DHCP is disabled and display ...
Page 44 - Connecting the SUV Cable to the Server Blade; are not intended to provide a permanent connection.; OK; to set the parameters.
NOTE: On the HP Integrity server blades, you have access to two serial ports through the RS-232 connector. The default setting is for the iLO 2 MP interface, the other is for an AUX UARTdirectly connected to the host operating system and can be used for any serial device (terminal,debug port, and so...
Page 46 - Figure 3-3 Connecting the SUV Cable to the Server Blade; Additional Setup; Modifying User Accounts and Default Passwords
Figure 3-3 Connecting the SUV Cable to the Server Blade Additional Setup This section provides additional information to set up the iLO 2 MP. Modifying User Accounts and Default Passwords The iLO 2 MP comes preconfigured with default factory settings, including a default user accountand password. Th...
Page 47 - Setting Up Security; Setting Security Access; Change the default user name and password. See
Setting Up Security For greater security and reliability, HP recommends that iLO 2 MP management traffic be on aseparate dedicated management network and that only administrators be granted access to thatnetwork. This not only improves performance by reducing traffic load across the main network,it ...
Page 49 - Accessing the Host Console; “Interacting with the iLO 2 MP Using the Web GUI” (page 49); Figure 4-1 Web Login Page; Sign In
4 Accessing the Host Console This chapter describes several ways to access the host console of an HP Integrity server. This chapter addresses the following topics:• “Interacting with the iLO 2 MP Using the Web GUI” (page 49) • “Accessing the Host Console Using the TUI” (page 50) • “Accessing the Hos...
Page 50 - Figure 4-2 Status Summary Page; Accessing Online Help; Accessing the Host Console Using the TUI; CO; Help System
Figure 4-2 Status Summary Page 4. Select the web interface functions by clicking the Primary tabs at the top of the page. Each function lists options in the Navigation Control on the left side of the page. 5. To display data in the content area; select an option and click Refresh to update the displ...
Page 51 - “Accessing; Accessing iLO 2 MP Using Onboard Administrator; Admin; Accessing the Graphic Console Using VGA
<COMMAND> : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen Q : Quit help ====MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. To return to the MP Main Menu, enter Q . To access help from ...
Page 53 - Register with DDNS
5 Configuring DHCP, DNS, LDAP, and LDAP Lite This chapter provides information on how to configure DHCP, DNS, LDAP extended schema,and LDAP Lite default schema. This chapter addresses the following topics:• “Configuring DHCP” (page 53) • “Configuring DNS” (page 54) • “Configuring LDAP Extended Schem...
Page 54 - Configuring DNS
• Modify the MP subnet mask. MP:CM> LC -s 192.0.2.1 • Modify the MP gateway address. MP:CM> LC -g 192.0.2.1 • Set the link state to autonegotiate. MP:CM> LC –link auto • Set the link state to 10 BaseT. MP:CM> LC –link t • Set the remote console serial port address. MP:CM> LC –web 2023...
Page 55 - NULL; Current User Search Context 3.
Configuring LDAP Extended Schema The following procedure shows how to configure the iLO 2 MP to use a directory server toauthenticate a user login using the iLO 2 MP TUI. NOTE: The LDAP connection times out after 30 minutes of inactivity in Active Directory. For Novell directory, there is no inactiv...
Page 56 - Login Process Using Directory Services with Extended LDAP; Configuring LDAP Lite Default Schema
Login Process Using Directory Services with Extended LDAP You can choose to enable directory services to authenticate users and authorize user privilegesfor groups of iLO 2 MPs. The iLO 2 MP directory services feature uses the industry-standardLDAP. HP layers LDAP on top of SSL to transmit the direc...
Page 57 - “Configuring LDAP Extended Schema” (page 55); Setting up Directory Security Groups; LDAP; LDAP
• Easy implementation without schema extensions. The iLO 2 MP schema-free integration is configured from any iLO 2 MP user interface(browser, command line, or script). • Minimal administration and maintenance.— After initial setup, only groups and permissions require maintenance support on the iLO 2...
Page 59 - Using iLO 2 MP; Text User Interface; to certain commands are different than a rack-mount server.; MP Command Interfaces; lists and describes the available MP command interfaces.; displays the MP command interface options.
6 Using iLO 2 MP This chapter provides information and instructions on how to use the iLO 2 MP. This chapter addresses the following topics: • “Text User Interface” (page 59) • “Web GUI” (page 82) • “Integrated Remote Console (vKVM)” (page 88) • “Virtual Media” (page 95) • “Power Management” (page 1...
Page 60 - Figure 6-1 MP Command Interfaces; After logging in to the iLO 2 MP, the; runs as a; Table 6-2 MP Main Menu Commands; MP Main Menu Commands; command descriptions are listed as follows:
Figure 6-1 MP Command Interfaces MP Main Menu After logging in to the iLO 2 MP, the MP Main Menu appears. The MP Main Menu runs as a private session. Other iLO 2 MP users do not see the actions you perform in the private session. The iLO 2 MP can support multiple sessions to perform independent task...
Page 61 - “SMASH Server Management Command Line Protocol”
CO (Console): Leave the Main Menu and enter console mode CO switches the console terminal from the MP Main Menu to mirrored/redirected console mode. All console output is mirrored to all users in console mode. Only one of the mirrored users at atime has write access to the console. To get console wr...
Page 62 - Table 6-4 Alert Levels
Events are data items that communicate system information from the source of the event to otherparts of the system, then to you. Events are produced by intelligent hardware modules, theoperating system, and system firmware. Events funnel into BMC from different sources throughoutthe server. The iLO ...
Page 63 - (Help): Display help for the menu or command in the MP Main Menu; Command Menu; Table 6-5 Command Menu Commands
HE (Help): Display help for the menu or command in the MP Main Menu HE displays the MP hardware and firmware version identity, and the date and time of firmware generation. If executed from the MP Main Menu , HE displays general information about the iLO 2 MP, and those commands available in the MP ...
Page 64 - Command Line Interface Scripting
Table 6-5 Command Menu Commands (continued) Description Command Sets access options SA Configures SNMP parameters SNMP Configures security options SO Displays system processor status SS Displays all firmware revisions SYSREV Resets through transfer of control (TOC) TC “Tell” (sends a message to othe...
Page 65 - Expect Script Example
NOTE: This guide is not meant as a substitute for instruction on various scripting tools that are available for automating command-line interfaces. The iLO 2 MP TUI (when used withcommand-line arguments) and the SMASH command-line interface were created with thesetypes of scripting tools in mind to ...
Page 66 - expect eof; menu
send_user "Password: "expect_user -re "(.*)\n"set mp_password $expect_out(1,string)stty echo # Other Constantsset timeout 20 ########################################################################## BEGIN##spawn $env(SHELL)match_max 100000 #foreach mp_name {puma_mp lion_mp cougar_mp...
Page 67 - Onboard Administrator Configuration
commands that require a password can have that password entered on the command line( FW , UC ). If -nc is specified on a command with no other parameters or with only a specific multilevel selector, the command displays all or just the specific multilevel parameters. The absenceof a specific multile...
Page 68 - BLADE; : Configure asynchronous local serial port; stty
OK Normal operation, any issues have been acknowledged. Degraded Typically loss of redundancy or partial failure of a component. Critical Failure with loss or imminent loss of system function. Command line usage and scripting: BLADE [ -nc ] blade -? Example of the BLADE Command With Output [gstlhpg1...
Page 69 - SA; DATE; Command line usage and scripting:; DC; DC; DF
NOTE: Both short and long reset button presses return the port default connection to the MP. The iLO 2 MP mirrors the system console to the iLO 2 MP local and LAN ports. One consoleoutput stream is reflected to all connected console users. If several different terminal types areused simultaneously, ...
Page 70 - DI; DNS; FW; : Display help for menu or command in command menu interface
DF displays FRU information for FRU devices located behind the BMC. Information provided includes serial number, part number, model designation, name and version number, andmanufacturer. Command line usage and scripting: DF [ -specific[ <fruid> ] | -all ] [ -view <text|hex> ] [ -nc ] -? ...
Page 71 - : System information settings; : Inactivity timeout settings
HE displays the MP hardware and firmware version identity, and the date and time of firmware generation. • If executed from the MP Main Menu , HE displays general information about the iLO 2 MP and those commands available in the MP Main Menu . • If executed in command mode, HE displays the MP Help:...
Page 74 - LM; LOC; LS
| -nc ] -? See also: LOGIN, US LDAP : LDAP group administration LDAP enters one or more directory groups by specifying the distinguished name of the group and privileges to be granted to users who are members of that group. You must configure group administration information when the directory is en...
Page 75 - PC; System will be powered on.; PM; Command line usage and scripting
Command line usage and scripting: LS [ -nc ] -? See also: DNS, LC, SA PC : Power control access Command access level: Power control access PC enables control of the power management module. It provides the following options for remote control of system power: ON Turns the system power on. This comma...
Page 76 - Example; PR; PS; RB
Example [gstl0074] MP:CM> pm PM [ -dynamic | -low | -high | -os ] [ -nc ] PM -?[gstl0074] MP:CM> pm PM Current System Power Mode : Dynamic Mode Power Regulator Menu: D - Dynamic Power Savings Mode L - Static Low Power Mode H - Static High Performance Mode O - OS Control Mode Enter menu item or...
Page 77 - RS; TC; SNMP; SNMP
RB [ -nc ] -? See also: PC, SS RS : Reset system through the RST signal Command access level: Power control access IMPORTANT: During normal system operation, shut down the OS before issuing the RS command. RS resets the system (except iLO 2 MP) through the RST signal. Running this command irrecovera...
Page 78 - SO; SS
5. Enter E to enable or D to disable all SNMP alerts. The screen displays the new SNMP configuration settings. NOTE: Currently, the SNMP alert feature is supported on HP Integrity server blades only. 6. To configure a destination IP address for SNMP alerts, enter 1 2 3 4 . The default is blank (unus...
Page 79 - SYSREV; : Send a message to other mirroring terminals
SS displays the status of the system processors and which processor is the monarch. The iLO 2 MP learns the system configuration through the events it receives from the system.There is usually a delay between any processor configuration change and what is displayed bythis command. For the most up-to...
Page 81 - User may be disconnected in this process; WHO; XD
[ -enable <e|d> \ [ -password [ <value> ] [ -delete <login> ] | [ -list <login> ] ] [ -nc ] -? Example: [gstlhpg1] MP:CM> uc -delete Oper -nc UC -delete Oper -nc Current User Parameters: User Login ID : Oper User Password : ************ User Name : Default Operator User Wo...
Page 82 - Web GUI; “Advanced Pack; System Status; Status Summary > General
XD performs simple checks to confirm the iLO 2 MP health and its connectivity status. The following tests are available: • iLO 2 MP Parameter Checksum in NVRAM • Verify I2C connection (get BMC device ID) • LAN connectivity test using the ping command • History of firmware updates and other activitie...
Page 83 - Status Summary > Active Users; The Active Users page (
Figure 6-2 Status Summary General Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-6 lists the fields and descriptions. Table 6-6 Status Summary General Page Description Description Field The current power state ( ON/OFF/STANDBY ) of the system and the correspon...
Page 84 - Server Status > General; The Server Status General page (
Figure 6-3 Status Summary Active Users Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-7 lists the fields and descriptions. Table 6-7 Active Users Page Description Description Field Multiple access methods are available: Serial, telnet, SSH, SSL web or IPMI ove...
Page 85 - Server Status > Identification
Figure 6-4 Server Status General Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-8 lists the fields and descriptions. Table 6-8 Server Status General Page Description Description Field Displays the current power state of the system and the corresponding power L...
Page 86 - applications on the network.; System Event Log; ) enables you to view the contents of the event logs
Figure 6-5 Server Status Identification Page Table 6-9 lists the fields and descriptions. Table 6-9 Server Status Identification Page Description Description Field Displays the server host name. Server Host Name Displays the rack unique identifier: a known unique identifier for the rack. Rack UID Di...
Page 87 - Events
Figure 6-6 System Event Log Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-10 lists the fields, buttons, and descriptions. Table 6-10 System Event Log Page Description Description Fields and Buttons High attention events and errors. Reading the SEL off the att...
Page 88 - IRC Requirements and Usage; Administration
from the source of the event to other parts of the system, and ultimately to the systemadministrator. The log viewer contains an event decoder to help you interpret events. The following event severity (or alert) levels are defined: 0: Minor forward progress 1: Major forward progress 2: Informationa...
Page 90 - Accessing the IRC
Server Display Properties • Set the background to plain (no wallpaper pattern) on the host server. • Set the client screen resolution higher than the host server for best remote consoleperformance. • Set the display resolution to 800 x 600 pixels, or the maximum supported resolution of 1024x 768 pix...
Page 91 - The IRC displays the host server ’s graphics console (
Figure 6-7 Integrated Remote Console Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-11 lists the fields, buttons, and actions. Table 6-11 IRC Page Description Action Fields and Buttons Resizes the IRC page.For fullscreen with multi-head client, launch the brow...
Page 92 - log out before closing the IRC.
Figure 6-8 Integrated Remote Console Window Table 6-12 lists the menu bar, buttons, and actions you can perform in the IRC window. Table 6-12 IRC Window Description Action Menu Bar Buttons Enables you to keep the menu open, or retracts it when the mouse is movedaway. Thumb Tack Enables you to simula...
Page 93 - Remote Serial Console; Figure 6-9 Remote Serial Console Page
however, some monitors have trouble with the highest screen refresh rates supported by thevideo adapter. If this occurs, follow these steps: 1. To check our desktop properties, right-click the desktop and select Properties > Settings > Advanced > Monitor . 2. Select a lower screen refresh r...
Page 94 - Figure 6-10 Remote Serial Console Window
types are used simultaneously by the users, some users may see unexpected results. Only oneof the mirrored users at a time has write access to the console. Write access is retained untilanother user requests console write access. To get console write access, enter Ctrl-Ecf . To ensure proper operati...
Page 95 - Virtual Serial Port; Virtual Media
• View and interact with the boot sequence of your server. • Perform maintenance activities in text mode. • Manage non-graphical mode operating systems. The console window remains open until you sign out of the iLO 2 MP interface using the providedlink in the banner, leave the iLO 2 MP site, or refr...
Page 96 - Using iLO 2 MP Virtual Media Devices; because it is also signed using the same certificate.; Virtual Devices; . The Virtual Media page appears
Using iLO 2 MP Virtual Media Devices Connect client-based vMedia to a host HP Integrity server through a graphical interface usinga signed Java applet. Refusing to accept the applet certificate prevents browser-based vMediafrom functioning (a red X appears). It also prevents the remote console apple...
Page 97 - “Supported Operating Systems and USB Support for vMedia” (page 102); New Hardware Found; . If a user does not have the vMedia right, it can be granted; tab by a user with Admin privileges.; . The Virtual Media content page appears.
NOTE: When you disconnect the iLO 2 MP vMedia, you might receive a warning message from the host operating system regarding unsafe removal of a device. This warning can beavoided by using the operating system's-stop-device function before disconnecting it from thevMedia. Virtual CD/DVD The iLO 2 MP ...
Page 98 - Click; Only one user and one device can be connected at a time.; Local Media Drive
2. Click Launch to load the applet and connect to USB CD/DVD devices and disk image files available on the client as virtual devices on the server. The vMedia applet appears( Figure 6-12 ). NOTE: Only one user and one device can be connected at a time. Figure 6-12 Virtual Media Dialog Box (Before Co...
Page 99 - Connect; Virtual Media CD/DVD Operating System; mount
5. Click Connect . The connected drive icon and LED changes states to reflect the current status of the virtual CD/DVD. Figure 6-13 Virtual Media Dialog Box (after connection) After you are connected, virtual devices are available to the host server until you close the vMediaapplet or sign out from ...
Page 100 - Creating the iLO 2 MP Disk Image Files; Create Media Image; Figure 6-14 Local Image File Dialog Box; Browse
Creating the iLO 2 MP Disk Image Files The iLO 2 MP vMedia feature enables you to create CD and DVD image files within the sameapplet. The image files created are ISO-9660 file system images and El Torito bootable CD images.The performance of the iLO 2 MP vMedia is faster when image files are used. ...
Page 101 - Create Disk Image; . The vMedia applet begins the process of creating the image file.; Cancel; To continue the installation, click; Do not click; Disconnect; Virtual Floppy/USB Key
Figure 6-15 Create Media Image Dialog Box 4. Click Create Disk Image . The vMedia applet begins the process of creating the image file. The process is complete when the progress bar reaches 100%. This creates a file that emulatesa CD/DVD on the local system. To cancel the creation of an image file, ...
Page 102 - Virtual Media Applet Timeout; Supported Operating Systems and USB Support for vMedia
If the host server operating system supports USB mass storage devices, the iLO 2 virtualfloppy/USB key is also available after the host server operating system loads. You can use theiLO 2 virtual floppy/USB key when the host server operating system is running to upgrade devicedrivers, create an emer...
Page 103 - Table 6-13 Operating System Support for vMedia; Client Operating System and Browser Support for vMedia; Table 6-14 Client Operating System and Browser Support for vMedia; Power Management
Table 6-13 Operating System Support for vMedia Operating system run-time using Virtual USB CD* Operating system installation using Virtual USB CD Yes Yes Linux Red Hat ES/RHEL 4 U3 Yes Yes Linux SuSE SLEX 10 SP3 Yes Yes HP-UX 11.23 HWE 0606 Yes Yes OpenVMS 8.3–1H1 Yes Yes Windows Enterprise Edition ...
Page 105 - Table 6-15 Power & Reset Page Description; The Power Meter Readings page (
Table 6-15 Power & Reset Page Description (continued) Description Fields and Buttons This option enables you to configure the power restore policy. The power restore policydetermines how the system behaves when ac power returns after an ac power loss.You must have iLO configuration access right ...
Page 107 - Table 6-16 Power Meter Readings Page Description; Power Regulator; Figure 6-19 Power Regulator Page
Table 6-16 Power Meter Readings Page Description (continued) Description Fields and Buttons Displays the maximum power reading from the server over the last 24-hour period. Ifthe server has not been running for 24 hours, the value is the maximum of all thereadings since the server was booted. Maximu...
Page 108 - Table 6-17 Power Regulator Page Description; Power Regulation through HP SIM (using the HP IPM plug in); Information on HP IPM is available on the HP website at:; Power Regulation through the iLO 2 MP; The; tab enables you to access the following pages:
Table 6-17 Power Regulator Page Description Description Fields and Buttons Three are four modes in which the power regulator can operate. The power regulatormodes (Static Low, Static High and Dynamic) are independent of the operating systemand work for any operating system. The OS Control Mode requi...
Page 109 - Firmware Upgrade; Licensing
• Local Accounts • Group Accounts • Settings • Access Settings: LAN, Serial, and Login Options • Directory Settings: LDAP Parameters • Network Settings: Standard and Domain Name Server • BL c-Class (Available only for server blade.) • SNMP Settings • Help Firmware Upgrade The Firmware Upgrade page f...
Page 111 - Table 6-18 Licensing Page Description; User Administration > Local Accounts; The Local Accounts page (
Table 6-18 Licensing Page Description (continued) Description Fields and Buttons Submits the key for activation. Submit Cancels the action. Cancel iLO provides a mechanism to install a license key which unlocks the advanced pack features.There are two types of licenses:1. iLO 2 MP Advanced Evaluatio...
Page 112 - Table 6-19 Local Accounts Page Description; Group Accounts; The Group Accounts page (
Table 6-19 Local Accounts Page Description Description Field Select an existing user from the list of user names to edit or delete that account or select New User to add a new user. Select User Click this button after selecting the user account to modify or to add a new account.For an existing accou...
Page 113 - Table 6-20 Group Accounts Page Description; Access Settings; LAN
Table 6-20 Group Accounts Page Description Description Fields and Buttons Click Administrator and click Edit to open the Group Settings page and enter information. Administrator Click User and click Edit to open the Group Settings page and enter information. User Click Custom 1,2,3,4 and click Edit ...
Page 114 - Table 6-21 LAN Page Description; Serial Page; ) enables you to set the serial port parameters. You must have iLO
Table 6-21 LAN Page Description Description Fields and Buttons You can enable or disable telnet access to the iLO 2 MP using the enable or disableoption. Telnet You can enable or disable SSH access to the iLO 2 MP using the enable or disable option. An industry-standard client-server connectivity pr...
Page 115 - Table 6-22 Serial Page Description; Login Options Page; Figure 6-25 Login Options Page
NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-22 lists the fields, buttons, and descriptions. Table 6-22 Serial Page Description Description Fields and Buttons This option enables you to set the baud rate. Input and output data rates are the same. Bit Rate in Bits...
Page 116 - Table 6-23 Login Options Page Description; Current LDAP Parameters; Figure 6-26 Current LDAP Parameters Page
Table 6-23 Login Options Page Description (continued) Description Fields and Buttons Submits the information. Submit Cancels the action. Cancel Current LDAP Parameters The Current LDAP Parameters page ( Figure 6-26 ) enables you to edit LDAP parameters. You must have iLO configuration access right t...
Page 117 - Table 6-24 Current LDAP Parameters Page Description; Network Settings; Network Settings > Standard
Table 6-24 Current LDAP Parameters Page Description Description Field Choosing enable or disable, activates or deactivates directory support on iLO 2 MP:• Enable with Extended Schema: selects directory authentication and authorization using directory objects created with HP schema. Select this optio...
Page 118 - Domain Name Server; ) enables you to configure the DNS server
Figure 6-27 Standard Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-25 lists the fields, buttons, and descriptions. Table 6-25 Standard Page Description Description Fields and Buttons The 12 digit (hexadecimal) MAC address. MAC Address Enable or Disable. DHCP ...
Page 119 - SNMP Settings
NOTE: You can only configure the DNS server if DHCP is enabled. Figure 6-28 Domain Name Server Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-26 lists the fields, buttons, and descriptions. Table 6-26 DNS Page Description Description Fields and Buttons Use the...
Page 121 - Reset MP (XD command option ‘R’) for configuration to take effect.; Figure 6-30 Onboard Administrator
NOTE: If SNMP was disabled earlier and then enabled, you will receive the following message: Reset MP (XD command option ‘R’) for configuration to take effect. Click OK and reset the iLO 2 MP. BL c-Class The Onboard Administrator page ( Figure 6-30 ) is used to facilitate the cabling and initial ins...
Page 122 - Table 6-28 Onboard Administrator Page Description; Help
Table 6-28 Onboard Administrator Page Description (continued) Description Field This is used to logically group together the server blades installed in the same enclosure.The enclosure name is shared with the other servers in the enclosure. Enclosure Name This displays the health of the enclosure. E...
Page 123 - SM CLP Features and Functionality Overview; SM CLP includes the following features:
Figure 6-31 Help Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. You can also click the ? at the top right corner of each page to display help about the page you are on. Select any of the topics listed in the left navigation bar to access that particular help screen. S...
Page 124 - SM CLP Session; Accessing the SM CLP Interface; SMCLP; Exiting the SM CLP Interface; exit; Changing the iLO 2 Default Interface to SM CLP
• CLP sessions are independent from each other and nonmirrored. • Provides a subset of MP CLI commands. • Provides access to the MP Main Menu interface and system console interface. SM CLP Session Sessions between a client and an SM CLP service are established over a transport protocol. Oncethe sess...
Page 125 - This command allows you to modify MP access configuration.; Using the SM CLP Interface; Where
3. Use the following example as you follow the prompts on the screen to change the defaultinterface from MP Main Menu to SM CLP. MP:CM>SA This command allows you to modify MP access configuration. Current Set Access Configuration: R - Remote : OS SESSION T - Telnet : Enabled H - SSH : Disabled W ...
Page 126 - SM CLP Syntax; Command Line Terms; Table 6-29 Supported Command Verbs
</>hpiLO-> If an invalid target is specified, the response differs as follows: </> hpiLO-> show /badtarget1 status=3 status_tag=COMMAND PROCESSING FAILED error_tag=COMMAND SYNTAX ERROR ‘/badtarget1’ is an invalid target. </>hpiLO-> SM CLP Syntax The following sections prov...
Page 127 - Command Targets; show; Command Target Properties
Table 6-29 Supported Command Verbs (continued) Action Command Displays context-sensitive help. help displays general help and all supported commands. help <some verb> displays help for the specified verb. help <some target> displays help for the specified target. help <some property&g...
Page 128 - Command Options; show –level all
Command Options Command options control verb behavior. Command options can appear immediately after the verb and must be prefaced with a dash (-). Most command options have both a full name and a short form; for example: show –level all or show –l all Level Option The level option instructs the comm...
Page 130 - Table 6-31 SM CLP Reserved Characters and Character Sequences; System1 Target; system1; System Reset Power Status and Power Control; Resetting the System; reset
Table 6-31 SM CLP Reserved Characters and Character Sequences (continued) Description and Uses Name Character or Sequence When preceded by a space, the hyphen is the SM CLP option indicator. Hyphen - Separates the UFiT terms of a target address. Address term separator / Recognized as a special targe...
Page 131 - Verbs
</>hpiLO-> reset system1status=0status_tag=COMMAND COMPLETEDsystem1 has been issued a reset Displaying Power Status To display the power state of the system, query the value of the enabledstate property of the system1 target. For example: </>hpiLO-> show -d properties=enabledstate ...
Page 132 - Text Console Services; textredirectsap; Opening the MP Main Menu from SM CLP; textredirectsap1
reset Resets the iLO 2 MP. Map1 Example The following example displays information about map1 : </> hpiLO-> show map1status=0status_tag=COMMAND COMPLETED /map1 Targets dhcpendpt1 dnsendpt1 dnsserver1 dnsserver2 dnsserver3 enetport1 gateway1 group1 settings1 sshsvc1 swinstallsvc1 swinventory...
Page 133 - Opening the System Console Interface from SM CLP; Switching Between the System Console and the SM CLP
Table 6-34 /map1/textredirectsap1 Properties Access and Values Description Property Name Read-onlyThe value is set to Enabled . Shows whether the text redirection isenabled. EnabledState Read-onlyThe value is set to SMCLP . Enter SMCLP at the MP Main Menu to return to the SM CLP interface. A string ...
Page 134 - Exiting the MP Main Menu Session and Returning to SM CLP; Firmware Revision Display and Upgrade; swid; SM CLP Firmware Targets; swinstallsvc1
Starting a System Console Session To start a system console session, enter the following command: </>hpiLO->start /system1/consoles1/textredirectsap1 Determining the Session Termination Character Sequence for the System Console To determine the session termination character sequence for the...
Page 135 - Displaying Firmware Revisions
cd Changes the current default target. help Displays context-sensitive help. show Displays information. Target: map1/swinventory1 SoftwareInventory is a dedicated collection for all firmware in the system known to the iLO 2MP. Table 6-37 shows swinventory1 target properties. Table 6-37 swinventory1 ...
Page 136 - Firmware upgrades enhance the functionality of iLO 2 MP.; and password; Remote Access Configuration; Telnet SM CLP Targets
Properties VersionString=F.01.57 This example displays all the firmware revisions. </>hpiLO-> show /map1/swinventory1/swid* /map1/swinventory1/swid1 TargetType=MP FW VersionString=F.01.57 /map1/swcollection1/swid2 TargetType=BMC FW VersionString=01.60 /map1/swcollection1/swid3 TargetType=EF...
Page 137 - sshsvc1
Target: map1/telnetsvc1 The telnetsvc1 target represents the telnetsvc service provided by map1 . Table 6-39 shows telnetsvc1 target properties. Table 6-39 telnetsvc1 Properties Access and Values Description Property Name Read-onlyThe following are valid values: Enabled, Disabled Shows whether telne...
Page 138 - SSH Examples; Network Configuration; SM CLP Network Targets, Properties, and Verbs; enetport1
SSH Examples The following examples show specific SSH commands. Enable SSH Service </>-> start /map1/sshsvc1 Disable SSH Service </>-> stop /map1/sshsvc1 Network Configuration Network commands enable you to display or modify network settings. SM CLP Network Targets, Properties, and...
Page 140 - Table 6-45 dnsendpt1 Properties
Target: map1/dnsendpt1 The dnsendpt1 target represents the iLO 2 MP DNS client. Table 6-45 shows dnsendpt1 target properties. Table 6-45 dnsendpt1 Properties Access and Values Description Property Name Read onlyThe following are valid values: Enabled: The iLO 2 MP DNS client isenabled. Disabled: The...
Page 141 - SM CLP Network Command Examples
set Sets a property to a specific value. Target: map1/settings1/dnssettings1 The dnssettings1 target contains iLO 2 MP DNS settings. Table 6-48 shows dnssettings1 target properties. Table 6-48 dnssettings1 Properties Access and Values Description Property Name Read/writeThis is an array property. Th...
Page 142 - vMedia; Table 6-49 cddr1 Properties
Determine Gateway Address </>hpiLO-> show -d properties=accessinfo/map1/enetport1/lanendpt1/ipendpt1/gateway1 Set Gateway Address </>hpiLO-> set /map1/enetport1/lanendpt1/ipendpt1/gateway1AccessInfo=192.0.2.1 Determine Link State (Autosense) </>hpiLO-> show -d properties=a...
Page 143 - User Accounts Configuration; Table 6-50 group1 Properties
Verbs show Displays information. help Displays context-sensitive help. set Sets a property to a specific value. SM CLP vMedia Use Cases The following examples show actions you can perform using SM CLP for vMedia. Change the current context to the CD drive. –> cd / map1 / oemhp_vm1 / cddr1 Show th...
Page 144 - User Account Examples; LDAP Configuration
Table 6-51 account# Properties (continued) Access and Values Description Property Name Read/write.Specified in ASCII characters up to 24 characters long. User name of this account. Name Read/write.The following are valid values: <console,power,mp,user,virtual), <all> or <none>. Privil...
Page 145 - Table 6-52 oemhp_ldapsettings1 Properties; LDAP Configuration Examples
Table 6-52 oemhp_ldapsettings1 Properties Access and Values Description Property Name Read write.Valid values are:DefaultSchema: enable directory authenticationusing default schema. ExtendedSchema: enable directoryauthentication using extended HP schema. Disabled: disable directory authentication Re...
Page 147 - “Directory Services for Active Directory” (page 152)
7 Installing and Configuring Directory Services You can install and configure the iLO 2 MP directory services to leverage the benefits of a singlepoint of administration for the iLO 2 MP user accounts. This chapter provides information on how to install and configure iLO 2 MP directory services. Thi...
Page 148 - “Directory
Features Supported by Directory Integration The iLO 2 MP directory services functionality enables you to do the following: • Authenticate users from a shared, consolidated, scalable user database. • Control user privileges (authorization) using the directory service. • Use roles in the directory ser...
Page 150 - Schema Preview Screen; Schema Preview; Figure 7-1 Schema Preview Screen; Setup Screen; Setup
Required Schema Software The iLO 2 MP requires specific software to extend the schema and provide snap-ins to managethe iLO 2 network. An HP Smart Component that contains the schema installer and themanagement snap-in installer is available for download from the HP website at: http://www.hp.com/serv...
Page 151 - Figure 7-2 Schema Setup Screen; Results Screen
Figure 7-2 Schema Setup Screen The Directory Server section of the Setup screen enables you to select whether to use Active Directory or eDirectory, and to set the computer name and the port to be used for LDAPcommunications. IMPORTANT: To extend the schema on Active Directory you must be an authent...
Page 152 - Figure 7-3 Schema Results Screen; Management Snap-In Installer; Create and manage the iLO 2 MP objects and role objects.; Directory Services for Active Directory; Active Directory Installation Prerequisites; The iLO 2 MP advanced features must be licensed.
Figure 7-3 Schema Results Screen Management Snap-In Installer The management snap-in installer installs the snap-ins required to manage the iLO 2 MP objectsin a Microsoft Active Directory Users and Computers directory or in a Novell ConsoleOnedirectory. To create an iLO 2 MP directory using iLO 2 MP...
Page 153 - Preparing Directory Services for Active Directory; Update Allowed
IMPORTANT: To install directory services for the iLO 2 MP, an Active Directory schema administrator must extend the schema. • Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Installing Active Directory in the Microsoft Windows 2000 Ser...
Page 154 - Policies; Installing and Initializing Snap-Ins for Active Directory; For more information about iLO 2 MP objects, see
The Active Directory schema folder may need to be expanded for the checkbox to be available. 4. Create a certificate or install Certificate Services. This step is necessary because the iLO 2MP uses SSL to communicate with Active Directory. 5. To specify that a certificate be issued to the server run...
Page 155 - Figure 7-4 Directory Example; MPs; organizational unit and select; NewHPObject
NOTE: Roles, such as hpqTargets and so on, are for extended schema LDAP only. They are not used in LDAP Lite. Assume that a company has an enterprise directory including the domain mpiso.com, arrangedas shown in Figure 7-4 . Figure 7-4 Directory Example 1. Create an organizational unit to contain th...
Page 158 - Directory Services Objects; Active Directory Snap-Ins; Managing HP Devices In a Role
10. Click Apply and OK . Members of the remoteMonitors role are able to authenticate and view the server status. User rights to any iLO 2 are calculated as the sum of all the rights assigned by all the roles inwhich the user is a member and the iLO 2 is a managed device. Following the preceding exam...
Page 159 - Members; ) to manage the users within the; Add; Figure 7-9 Members Tab
Figure 7-8 HP Devices Tab Managing Users In a Role After user objects are created, use the Members tab ( Figure 7-9 ) to manage the users within the role.• To add a user, browse to the specific user you want to add, and click Add . • To remove a user from the list of valid members, highlight an exis...
Page 160 - Setting Login Restrictions; Role Restrictions; ) enables you to set login restrictions for a role. These; Effective Hours; Use the default setting to allow access at all times.
Setting Login Restrictions The Role Restrictions tab ( Figure 7-10 ) enables you to set login restrictions for a role. These restrictions include: • Time Restrictions • IP Network Address Restrictions— IP/Mask— IP Range— DNS Name Figure 7-10 Role Restrictions Tab Setting Time Restrictions • To manag...
Page 162 - Setting User or Group Role Rights; Use the; Lights Out Management; Figure 7-13 Lights Out Management Tab
on a single DNS name or a subdomain, entered in the form of host.company.com or*.domain.company.com. 4. Enter the information and click OK. 5. To save the changes, click OK . To remove any of the entries, highlight the entry in the display list and click Remove . Setting User or Group Role Rights Af...
Page 163 - LDAP Lite is not supported with eDirectory.; Installing and Initializing Snap-In for eDirectory; “Installing and Initializing; Creating Objects; To create iLO 2 MP objects, follow these steps:
Directory Services for eDirectory The following sections provide installation prerequisites, preparation, and a working exampleof directory services for eDirectory. NOTE: LDAP Lite is not supported with eDirectory. Installing and Initializing Snap-In for eDirectory For instructions on using the snap...
Page 164 - Figure 7-15 Select Object Subtype Dialog Box; Creating Roles
2. From in the region1 organizational unit, right-click the HP devices organizational unit. Select New , and select Object . a. Select hpqTarget from the list of classes, and click OK . b. Enter an appropriate name and surname in the New hpqTarget dialog box. In thisexample, the DNS host name of the...
Page 165 - Figure 7-16 Setting Role Rights
a. Right-click the remoteAdmins role in the roles organizational unit in the region1 organizational unit, and select Properties . b. Select the Role Managed Devices subtab of the HP Management tab, and click Add . c. Using the Select Objects dialog box, browse to the HP devices organizational unit i...
Page 166 - csmith; Directory Services Objects for eDirectory; Adding Role Managed Devices; Role Managed Devices; subtab under the; HP Management; devices to be managed within a role.; Adding Members; After you create user objects, use the
devices,ou=region1,o=samplecorp Directory User Context 1 = ou=users,o=samplecorp For example, user CSmith (located in the users organizational unit within the samplecorporganization, who is also a member of one of the remoteAdmins or remoteMonitors roles) wouldbe allowed to log in to the iLO 2 MP. H...
Page 167 - Setting Role Restrictions
Figure 7-18 Members Tab (eDirectory) To browse to the specific user you want to add, click Add . To remove a user from the list of valid members, highlight the user name and click Delete . Setting Role Restrictions The Role Restrictions subtab ( Figure 7-19 ) enables you to set login restrictions fo...
Page 168 - Setting Time Restrictions; Defining Client IP Address or DNS Name Access; Figure 7-20 Add New Restriction Dialog Box; Setting Lights-Out Management Device Rights
Setting Time Restrictions You can manage the hours available for login by members of a role using the time grid displayedin the Role Restrictions subtab ( Figure 7-19 ). You can select the times available for login for each day of the week in half-hour increments. You can change a single square by c...
Page 169 - Installing the Java Runtime Environment
Figure 7-21 Lights-Out Management Device Rights Tab Table 7-2 lists the available management device rights. Table 7-2 Management Device Rights Description Option This option controls whether users can log in to the associated devices and execute status or read-only commands (view event logs and cons...
Page 170 - rpm; Extending Schema; Already Exists; netstat –nt grep :636
To ensure you have the correct version of JRE installed on your system, follow these steps: 1. To determine the Java version, execute the following command: # java -version The Java version installed on your system is displayed. 2. If Java is not installed on your system, execute the following comma...
Page 171 - Verifying Snap-In Installation and Schema Extension; Run ConsoleOne and log on to the tree.; Schema Manager; LDAP Command Menu; in the iLO 2 MP CLI to configure iLO 2 MP LDAP directory
Verifying Snap-In Installation and Schema Extension To verify the installation of snap-ins and schema extension, follow these steps: 1. Run ConsoleOne and log on to the tree. 2. Verify the new classes by opening the Schema Manager from the Tools list. All the classes related to the HP directory serv...
Page 172 - -> Current Distinguished Name has been retained; User Login Using Directory Services
-> Current Distinguished Name has been retained User Search Context 1: Current -> o=mp Enter new value, or Q to Quit: <CR> -> Current User Search Context 1 has been retained User Search Context 2: Current -> o=demo Enter new value, or Q to Quit: <CR> -> Current User Search...
Page 173 - Installing Certificate Services; mmc; Directory-Enabled Remote Management; “Directory Services”
Certificate Services The following sections provide instructions for installing Certificate Services, verifying directoryservices, and configuring automatic certificate requests. Installing Certificate Services To install Certificate Services, follow these steps: 1. Select Start>Settings>Contr...
Page 174 - Using Existing Groups; Novell; Using Multiple Roles
In general, you can use the HP provided snap-ins to create objects. It is useful to give the iLO 2MP device objects meaningful names, such as the device's network address, DNS name, hostserver name, or serial number. Directory-enabled remote management enables you to: • Create iLO 2 MP objects: Each...
Page 175 - Creating Roles that Follow Organizational Structure; “Setting; Role Time Restrictions
devices, but grant different rights. Sometimes, it is useful to assign generic rights to the lesserrole, and include the iLO 2 MP administrators in that role, and the administrative role. Figure 7-22 shows one way that an administrative user gains admin role right. The admin user ’s initial login ri...
Page 176 - How Directory Login Restrictions Are Enforced
The iLO 2 MP devices use local host time to enforce time restrictions. If the iLO 2 MP deviceclock is not set, the role time restriction fails (unless no time restrictions are specified on the role). Role-based time restrictions can only be enforced if the time is set on the iLO 2 MP device. Thetime...
Page 177 - How User Time Restrictions Are Enforced; shows the user time restrictions.
Role access restrictions limit an authenticated user's ability to receive iLO 2 MP privileges basedon rights specified in one or more roles. Figure 7-24 shows the user and role access restrictions. Figure 7-24 User and Role Access Restrictions How User Time Restrictions Are Enforced You can place a ...
Page 178 - Figure 7-25 User Time Restrictions; User Address Restrictions
Figure 7-25 User Time Restrictions User Address Restrictions You can place network address restrictions on a directory user account, and the directory serverenforces these restrictions. See the directory service documentation for information about theenforcement of address restrictions on LDAP clien...
Page 180 - Core Classes; lists the core LDAP OID classes.; Core Attributes; lists the core LDAP OID attributes.; Core Class Definitions; define the HP management core classes.
Changes made to the schema during the schema setup process include changes to the following: • Core classes • Core attributes NOTE: Roles such as hpqTargets, and so on, are for extended schema LDAP only. They are not used in LDAP Lite. Core Classes Table 7-3 lists the core LDAP OID classes. Table 7-...
Page 181 - hpqRole; hpqPolicy; Core Attribute Definitions; through; hpqRoleMembership
hpqRole Table 7-6 hpqRole 1.3.6.1.4.1.232.1001.1.1.1.2 OID This class defines role objects, providing the basis for HP products using directory-enabledmanagement. Description Structural Class Type Group SuperClasses hpqRoleIPRestrictions—1.3.6.1.4.1.232.1001.1.1.2.5hpqRoleIPRestrictionDefault—1.3.6....
Page 182 - hpqRoleIPRestrictionDefault; hpqRoleIPRestrictions; hpqRoleTimeRestriction
hpqTargetMembership Table 7-10 hpqTargetMembership 1.3.6.1.4.1.232.1001.1.1.2.3 OID This attribute provides a list of hpqTarget objects that belong to this object. Description Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Syntax Multi Valued Options None Remarks hpqRoleIPRestrictionDefault Table ...
Page 183 - Table 7-13 hpqRoleTimeRestriction; iLO 2 MP-Specific LDAP OID Classes and Attributes; The schema attributes and classes in; iLO 2 MP Classes; Table 7-14 iLO 2 MP Classes; iLO 2 MP Attributes; Table 7-15 iLO 2 MP Attributes; iLO 2 MP Class Definitions
Table 7-13 hpqRoleTimeRestriction (continued) 1.3.6.1.4.1.232.1001.1.1.2.6 OID Single Valued Options This attribute is only used on role objects. Time restrictions are satisfied when the bitcorresponding to the current local side real time of the device is 1, and unsatisfied when thebit is 0. The le...
Page 184 - iLO 2 MP Attribute Definitions; hpqLOMRightRemoteConsole; hpqLOMRightServerReset
iLO 2 MP Attribute Definitions Table 7-17 through Table 7-22 define the iLO 2 MP core class attributes. hpqLOMRightLogin Table 7-17 hpqLOMRightLogin 1.3.6.1.4.1.232.1001.1.8.2.1 OID Login right for HP iLO 2 MP products. Description Boolean—1.3.6.1.4.1.1466.115.121.1.7 Syntax Single Valued Options Th...
Page 185 - hpqLOMRightConfigureSettings
hpqLOMRightLocalUserAdmin Table 7-21 hpqLOMRightLocalUserAdmin 1.3.6.1.4.1.232.1001.1.8.2.5 OID Local user database administration right for HP iLO 2 MP products. Description Boolean—1.3.6.1.4.1.1466.115.121.1.7 Syntax Single valued Options This attribute is only used on role objects. If this attrib...
Page 187 - Glossary; are translated to dott-quad addresses such as
Glossary A Address In networking, a unique code that identifies a node in the network. Names such as host1.hp.com are translated to dott-quad addresses such as 168.124.3.4 by the Domain Name Service (DNS). Address Path An address path is one in which each term has the appropriate intervening address...
Page 190 - An identifier for a computer or device on a TCP/IP network.
I In-band SystemManagement A server management capability that is enabled only when the operating system is initializedand the server is functioning properly. Integrated LightsOut (iLO) The iLO functionality offers remote server management through an independent managementprocessor (MP). iLO was int...
Page 195 - Index; command mode
Index A access options, 77access rights, configuring, 20alert levels, system status logs, 62ARP ping commands, 38using to configure a static IP address, 38using to configure iLO 2 MP LAN, 37 auto-login CLI SSH connection, 41features and usage, 41initiating a session, 42terminating a session, 43web G...