Dell Version 7.3 manual Best Practices While Using The Omarolemap File

Page 16

Table 5. Examples for adding the role definition in OpenManage Server Administrator

<User_Name>

<Host_Name>

<Rights>

Bob

Ahost

Poweruser

+ root

Bhost

Administrator

+ root

Chost

Administrator

Bob

*.aus.amer.com

Poweruser

Mike

192.168.2.3

Poweruser

3.Save and close the file.

Best Practices While Using The Omarolemap File

The following are the best practices to be considered while working with the omarolemap file :

Do not delete the following default entries in the omarolemap file.

root

* Administrator

+root

* Poweruser

*

* User

Do not change the omarolemap file permissions or file format.

Do not use the loop back address for <Host_Name> , for example: localhost or 127.0.0.1.

After the connection services are restarted and the changes do not take effect for the omarolemap file, see the command log for the errors.

When the omarolemap file is copied from one machine to another machine, file permissions and the entries of the file needs to be rechecked.

Prefix the Group Name with + .

Server Administrator uses the default operating system user privileges, if :

a user is degraded in the omarolemap file

there are duplicate entries of user names or user groups along with same <Host_Name>

You can also use Space as a delimiter for columns instead of [Tab].

Creating Server Administrator Users For VMware ESX 4.X, ESXi 4.X, And ESXi 5.X

To add a user to the Users table:

1.Log in to the host using the vSphere Client.

2.Click the Users & Groups tab and click Users .

3.Right-click anywhere in the Users table and click Add to open the Add New User dialog box.

4.Enter login, user name, a numeric user ID (UID), and password; specifying that the user name and UID are optional. If you do not specify the UID, the vSphere Client assigns the next available UID.

5.To allow a user to access the ESX/ESXi host through a command shell, select Grant shell access to this user. Users that access the host only through the vSphere Client do not need shell access.

6.To add the user to a group, select the group name from the Group drop-down menu and click Add .

7.Click OK .

16

Image 16
Contents Dell OpenManage Server Administrator Version 7.3 Users Guide Dell Inc Contents Server Administrator Services Working With Remote Access ControllerServer Administrator Logs Setting Alert ActionsTroubleshooting Frequently Asked QuestionsInstallation Updating Individual System Components IntroductionStorage Management Service Instrumentation ServiceRemote Access Controller What Is New In This ReleaseSystems Management Standards Availability Availability On Supported Operating SystemsOther Documents You May Need Server Administrator HomeOperating System Accessing Documents From Dell Support Site Obtaining Technical Assistance Contacting Dell Serviceability ToolsOMConnectionsEnterpriseSystemsManagement Setup And Administration Role-Based Access ControlUser Privilege Access Description Level Type View Manage Service User Privilege Level Required ViewAuthentication Microsoft Windows AuthenticationVMware ESX Server 4.X Authentication VMware ESXi Server 5.X AuthenticationAssigning User Privileges EncryptionAdding Users To a Domain On Windows Operating Systems Creating Users Creating Users With User Privileges Creating Users With Power User PrivilegesUserName HostName Rights Best Practices While Using The Omarolemap File Select Account is disabled and click OK Configuring The Snmp AgentOpen the Computer Management window Snmp Service Properties window appears Changing The Snmp Community NameSnmp Service Configuration window appears Snmp Agent Access Control ConfigurationEnabling Snmp Set Operations Server Administrator Snmp Agent Install Actions Sever Administrator Snmp Install Actions Enabling Snmp Access From Remote HostsTo configure the Snmp agent To enable VMWare Snmp service, run the following command Page Firewall Configuration Server Administrator Local System Login Using Server AdministratorLogging In And Out Central Web Server Login Click SubmitUsing The Active Directory Login Single Sign-OnEnabling The Use Of Client-Side Scripts On Internet Explorer Enabling The Use Of Client-Side Scripts On Mozilla FirefoxGUI Field Name Sample Server Administrator Home Page Non-Modular System Features Modular System System/Server Module Component Status Indicators Global Navigation BarSystem Tree Action WindowTask Buttons Gauge IndicatorsUnderlined Items Using The Online Help Using The Preferences HomeSetting User And System Preferences Server Administrator Web Server PreferencesManaged System Preferences Click General Settings Secure Port SystemCertificate Management Click X.509 CertificateUsing The Server Administrator Command Line Interface Server Administrator Web Server Action TabsServer Administrator Services Managing Your SystemManaging System/Server Module Tree Objects Server Administrator Home Page System Tree ObjectsModular Enclosure Accessing And Using Chassis Management Controller System/Server Module PropertiesModular Enclosure object Tab Properties Subtab Information Licensing Subtabs Information LicensingSubtabs Hardware Alert Command ShutdownLogs Alert ManagementSession Management Main System Chassis/Main SystemSubtabs Session Main System Chassis/Main System Properties Properties and Setup Subtab Information Setup Subtab BiosBatteries Properties Subtab InformationFirmware FansHardware Performance Intrusion MemoryProperties Subtab Intrusion Properties Subtab MemoryPower Management NetworkPorts Subtab Information PropertiesManagement Subtabs Budget Profiles Power SuppliesAlert Management Properties Subtab Elements Processors Remote AccessAlert Management Subtabs Alert Actions Temperatures Subtab Temperature Probes PropertiesRemovable Flash Media SlotsVoltages SoftwareOperating System Properties Subtab Voltage ProbesGeneral Settings Managing Preferences Home Page Configuration OptionsStorage Server Administrator Subtabs Access Configuration Snmp Configuration PreferencesWorking With Remote Access Controller Modular Enclosure Modular system Server Modules Main SystemRemote Access Device Viewing Basic InformationSystem Main System ChassisIPv4 Address IPv6 AddressVlan ID Click Apply ChangesClick Serial Port Serial Port Configuration window appears Click Apply Changes Click Terminal Mode SettingsConfiguring Remote Access Device Users Additional Configuration For iDRACClick Additional Configuration Setting Platform Event Filter Alerts None Reboot SystemPower Off System Power Cycle SystemSetting Platform Event Alert Destinations Server Administrator Logs Integrated FeaturesServer Administrator Logs Log Window Task ButtonsHardware Log Alert LogMaintaining The Hardware Log StatusCommand Log Setting Alert Actions Example 1 ps -ef /tmp/psout.txt 2&1Setting Alert Action Execute Application In Windows Server BMC/iDRAC Platform Events Filter Alert MessagesEvent Description Troubleshooting Connection Service FailureLogin Failure Scenarios Opt/dell/srvadmin/sbin/dsmomconnsvcdService Name Description Impact of Failure OpenManage Server Administrator ServicesSeverity Dsmsadatamgr Are there other ports users can use apart from 1311? Frequently Asked QuestionsPort ITA communicating with Linux systems