HP Integrated Lights-Out manual Using Existing Groups

Page 195

Directory-Enabled Remote Management

195

−Discover the LOM devices as management processors using CPQLOCFG to send a RIBCL XML script file to a group of LOM devices to manage those LOM devices. The LOM devices perform the actions designated by the RIBCL file and send a response to the CPQLOCFG log file. For more information, refer to the "Group Administration and iLO Scripting (on page 241)" and the "Remote Insight Command Language (on page 269)" sections.

•CPQLODOS Utility

LOM devices can be configured for directory support before the associated objects have been created in the directory. Administrators can use CPQLOCFG and tools like the PERL script ("Using Perl with the XML Scripting Interface" on page 255) ilodply.pl to configure many LOM devices. LOM devices will not be able to complete a directory authentication until the associated directory objects are created.

•Traditional Import Utilities

Administrators familiar with tools such as LDIFDE or the NDS Import/Export Wizard can use these utilities to import or create many LOM device objects in the directory. However, administrators must still configure the devices manually, as described above, but can do so at any time. Programmatic or scripting interfaces can also be used to create the LOM device objects in the same way as users or other objects. The "Directory Services Schema (on page 353)" section provides details on attributes and attribute data formats when creating LOM objects.

Using Existing Groups

Many organizations will have their users and administrators arranged into groups. In many cases, it is convenient to use the existing groups and associate the groups with one or more Lights-Out Management role objects. When the devices are associated with the role objects, the administrator controls access to the Lights-Out devices associated with the role by adding or deleting members from the groups.

Image 195

Contents HP Integrated Lights-Out User Guide Audience Assumptions Contents User Guide Integrated Lights-Out ILO Security 135 Certificate Services 189 Insight Manager 7 Integration 223 Lights-Out DOS Utility 249 Login Modglobalsettings Moddiagport Settings ILO Parameters 331 Contents Technical Support 397 Operational Overview New in This VersionThis Section Network Connection Overview Usage ModelSupported Server Operating System Software Supported Browsers Configuring Linux Font Size Linux Browser ConfigurationPage ILO Configuration Options Configuring iLOILO Rbsu Browser-Based Setup Scripted Setup Installing iLO Device DriversInstalling or Updating the iLO Drivers for Microsoft Select Software and DriversILO Pre-requisite Files for Microsoft Installing or Updating iLO Drivers for NetWare Novell NetWare Server Driver SupportILO Pre-Requisite Files for NetWare Red Hat Linux and SuSE Linux Server Driver Support ILO Pre-requisite Files for Red Hat and SuSE Linux FilesInstaling or Updating iLO Linux and SuSE Drivers Enabling iLO Advanced Functionality Activating iLO Advanced Features Using a Browser ILO Advanced Evaluation LicenseILO Advanced License Options User Guide Integrated Lights-Out Activating iLO Advanced Using Scripting ProLiant BL p-Class ConfigurationProLiant BL p-Class User Requirements Static IP Bay ConfigurationConfiguring Static IP Bay Settings Configuring a ProLiant BL p-Class Blade EnclosureUser Guide Integrated Lights-Out ProLiant BL p-Class Advanced Configuration Parameters ProLiant BL p-Class Standard Configuration ParametersRibcl Rackinfo Commands Enable iLO IP Address AssignmentRibcl Rackinfo Command Examples Getting Static IP Bay Configuration SettingsModifying Static IP Bay Configuration Settings Integration with Riloe II Accessory Boards Logging in to iLO for the First Time Using iLOLogging in to iLO for the First Time Using a Browser Using iLO User Guide Integrated Lights-Out Using iLO Help Progressive Delays for Failed Browser Login AttemptsSystem Status Status SummaryILO Status Server Status ILO Event Log Integrated Management Log Post Diagnostic Results for the Host Server Server and iLO DiagnosticsVirtual NMI Button Nvram Environment Variables ListingILO Self-Test Results Remote Console Option Remote ConsoleRemote Console Information Option Display Properties Enhanced Features of the Remote ConsoleRecommended Client Settings Optimizing Performance for Graphical Remote ConsoleMouse Properties Remote Console Linux SettingsRecommended Server Settings Remote ConsoleMicrosoft Windows Server 2003 Settings Microsoft Windows NT 4.0 and Windows 2000 SettingsRed Hat Linux and SuSE Linux Server Settings Novell NetWare SettingsRemote Console Hot Keys Supported Hot Keys Remote Console Single-Cursor Single- and Dual-Cursor Modes for Graphical Remote ConsoleRemote Console Dual-Cursor Virtual Devices Virtual Power Using iLO Virtual Media MS-DOS Operating System USB SupportUSB USB CD USB CD2 Using iLO Virtual Media Devices ILO Virtual FloppySelect Local Floppy Drive Click Connect Access iLO through a browser Connect Click Create Disk Image Select Local CD-ROM Drive ILO Virtual CD-ROMUsing an Image File Virtual Media CD-ROM Operating System Notes Mounting USB Virtual Media CD in NetWare Mount /dev/scd0 /mnt/cdrom -t iso9660 Virtual Media Composite Device Support Select Local Floppy Drive Virtual Media Applet Timeout ILO Virtual Media PrivilegeVirtual Media Scripting Command Line Input Result Virtual Media Image Files Scripting Web Server RequirementsCGI Helper Application Virtual Indicators Windows EMS Console Virtual Serial PortVirtual Serial Port and Linux Security InformationAdministration User AdministrationLinux End-to-End Support Adding a New User Click View/Modify User Viewing or Modifying an Existing Users SettingsGlobal Settings Click Global SettingsDeleting a User User Guide Integrated Lights-Out Network Settings Click Network Settings Using iLO ILO Diagnostic Port Configuration Parameters Recovering from a Failed iLO Firmware Update SNMP/Insight Manager SettingsEnabling Snmp Alerts Generating Test Alerts Click Apply SettingsConfigure Insight Manager Integration Upgrade iLO FirmwareClick Send firmware image Licensing Certificate AdministrationProLiant BL p-Class Advanced Management Directory SettingsUser Guide Integrated Lights-Out Rack Settings Server Blade Management Module Power Management ModuleILO Control of ProLiant BL p-Class Server LEDs Redundant Power Management ModuleServer Post Tracking Insufficient Power NotificationHot-Plug Keyboard Keyboard DefinitionsHot-Plug Keyboard Recommended Usage Hot-Plug Keyboard TroubleshootingUser Guide Integrated Lights-Out Terminal Services Client Requirements Terminal Services Pass-Through OptionWindows RDP Pass-Through Service Terminal Services Pass-Through Installation Windows 2000 Terminal Services Port Change Enabling the Terminal Services Pass-Through OptionTerminal Services Warning Message Terminal Services Pass-Through StatusTerminal Services Button Display Remote Console and Terminal Services ClientsTerminal Services Troubleshooting ComputerPropertiesRemoteRemote DesktopManagerMultifunction Adapters HP ProLiant Essentials Rapid Deployment Pack Integration Telnet SupportViewerApplication Telnet Simple Command Set Using TelnetTelnet Security Supported Key SequencesILO VT100+ Key Map Altk Altlowerj Linux Codes for the F-Keys VT100+ Codes for the F-KeysUsing Secure Shell Using SSHSecure Shell ILO Supported SSH Features Using OpenSSHUsing PuTTY ILO Shared Network Port Requirements ILO Shared Network PortILO Shared Management Port Features and Restrictions Enabling the iLO Shared Network Port Feature Select AdministrationNetwork Settings Re-enabling the Dedicated iLO Management Port Select NetworkNICTCP/IP, and press the Enter key Command Line InterfaceCLI Commands EscapeHelp Remcons PowerExit VspPage Security Features ILO SecurityGeneral Security Guidelines Encryption ILO Security Override Switch AdministrationUser Accounts Privileges Login SecurityGlobal Security Settings Password GuidelinesCertificates Securing Rbsu Page Benefits of Directory Integration Directory ServicesFeatures Supported by Directory Integration Installing Directory Services Schema Documentation Directory Services Support Schema Required Software Schema Installer EDirectory Installation PrerequisitesSchema Preview Setup Directory Services 151 Results Management Snap-In InstallerActive Directory Installation Prerequisites Directory Services for Active DirectoryDirectory Services Preparation for Active Directory Start MMC Install the Active Directory Schema snap-in in MMC Snap-In Installation and Initialization for Active Directory Directory Services 157 User Guide Integrated Lights-Out Directory Services 159 User Guide Integrated Lights-Out Directory Services 161 Directory Services Objects Active Directory Snap-Ins HP Devices Active Directory Role Restrictions MembersUser Guide Integrated Lights-Out Time Restrictions Enforced Client IP Address or DNS Name Access Remove Active Directory Lights-Out Management Snap-in Installation and Initialization for eDirectory Directory Services for eDirectoryUser Guide Integrated Lights-Out Directory Services 173 Apply Directory Services 175 Directory Services Objects for eDirectory Role Managed Devices Role Restrictions EDirectory Role Restrictions Time Restrictions Delete Lights-Out Management Directory Services 183 Configuring Directory Settings Directory Services 185 Directory Tests User Login Using Directory Services User Guide Integrated Lights-Out Certificate Services Introduction to Certificate ServicesInstalling Certificate Services Configuring Automatic Certificate Request Verifying Directory ServicesCertificate Services 191 Page Introduction to Directory-Enabled Remote Management Directory-Enabled Remote ManagementUsing Bulk Import Tools Using Existing Groups Using Multiple Roles AdminUserAdminRole Server UserRole Creating Roles to Follow Organizational Structure Restricting RolesRole Time Restrictions IP Address Range Restrictions IP Address and Subnet Mask RestrictionsDNS-Based Restrictions Role Address Restrictions How Directory Login Restrictions are EnforcedUser Address Restrictions How User Time Restrictions are EnforcedCreating Multiple Restrictions and Roles Directory-Enabled Remote Management 203 User Guide Integrated Lights-Out Introduction to Lights-Out Migration Utilities Lights-Out Directories Migration UtilitiesCompatibility Pre-Migration ChecklistHP Lights-Out Directory Package Finding Management Processors Hpqlomig OperationLights-Out Directories Migration Utilities 209 Upgrading Firmware on Management Processors Enter your Login NamePassword and click FindLights-Out Directories Migration Utilities 211 Naming Management Processors Select either Use Network Address or Create Name Using IndexConfiguring Directories Browse Click Update DirectorySetting Up Management Processors for Directories Click Configure Hpqlomgc Operation Directory is updated Launching Hpqlomgc Using Application LaunchFirmware version is validated and updated if necessary Management processor directory settings are updatedLights-Out Directories Migration Utilities 219 Hpqlomgc Command Language Iloconfig Page Integrating iLO with Insight Manager Insight Manager 7 IntegrationIdentification and Association Functional OverviewStatus QueriesLinks Configuring Identification of iLO Insight Manager 7 Integration 227 Receiving Snmp Alerts in Insight ManagerPort Matching Insight Manager 7 Integration 229 User Guide Integrated Lights-Out ProLiant BL p-Class Rack Visualization User Guide Integrated Lights-Out Integrating iLO with Systems Insight Manager Systems Insight Manager IntegrationSystems Insight Manager Functional Overview System Insight Manager Status System Insight Manager Identification and AssociationConfiguring System Insight Manager Identification of iLO System Insight Manager LinksSystem Insight Manager Systems Lists Receiving Snmp Alerts in Systems Insight Manager System Insight Manager Port Matching Systems Insight Manager Integration 239 Page Lights-Out Configuration Utility Group Administration and iLO Scripting\PROGRAM FILES\INSIGHT MANAGER\HP\SYTEMS Select Management Processor and click OK Query Definition in Insight ManagerApplication Launch Using Insight Manager Create a Custom Command Click ToolsCustom CommandsNew Custom CommandCreate a Customized List Click either Schedule or Run Now Create a TaskLights-Out Configuration Utility Parameters Batch Processing Using the Lights-Out Configuration UtilityCpqlocfg Overview of the Lights-Out DOS Utility Lights-Out DOS UtilityCommand Line Arguments Cpqlodos Recommended UsageCpqlodos General Guidelines Lights-Out DOS Utility 251 Ribcl XML Commands for Cpqlodos Cpqlodos Runtime ErrorCpqlodos Parameter Adduser Parameters Adduser Runtime ErrorsSetlicense Parameter Setlicense Runtime ErrorsUsing Perl with the XML Scripting Interface Perl ScriptingXML Enhancements XML script modification Opening an SSL Connection Sending the XML Header and Script Body Perl Scripting 259 User Guide Integrated Lights-Out Hponcfg Online Configuration Utility HponcfgHponcfg Supported Operating Systems Hponcfg Requirements Hponcfg Installation and UsageLinux Server Installation Windows Server InstallationUsing Hponcfg Hponcfg Command Line ParametersHponcfg Usage Model Obtaining an Entire ConfigurationSample adduser.xml input file Creating a User AccountHponcfg Online Configuration Utility Page Remote Insight Command Language Ribcl and ProLiant BL p-Class Servers Overview of the Remote Insight Board Command LanguageRibcl Sample Scripts Ribcl General Guidelines XML HeaderData Types Boolean String Response DefinitionsString Specific StringRibcl Runtime Errors RibclRibcl Parameter Login Login ParametersLogin Runtime Errors Userinfo Runtime Error UserinfoUserinfo Parameter Adduser Parameters AdduserRemote Insight Command Language Adduser Runtime Errors Deleteuser Runtime Errors DeleteuserDeleteuser Parameter Getuser Runtime Errors GetuserGetuser Parameter Getuser Return Messages ModuserModuser Parameters Moduser Runtime Errors Getallusers Return Messages Getallusers Runtime ErrorGetallusers Getallusers ParametersGetalluserinfo Runtime Errors GetalluserinfoGetalluserinfo Parameters Getalluserinfo Return Messages RibinfoResetrib Runtime Errors ResetribRibinfo Runtime Errors Resetrib ParametersGetnetworksettings Return Messages GetnetworksettingsGetnetworksettings Parameters Getnetworksettings Runtime ErrorsDhcpwinsserver VALUE=Y Regwinsserver VALUE=Y ModnetworksettingsModnetworksettings /RIBINFO Login Ribcl Modnetworksettings Parameters User Guide Integrated Lights-Out Getglobalsettings Modnetworksettings Runtime ErrorsGetglobalsettings Parameters Modglobalsettings Getglobalsettings Runtime ErrorsGetglobalsettings Return Messages Modglobalsettings Parameters User Guide Integrated Lights-Out Remote Insight Command Language Getsnmpimsettings Runtime Errors GetsnmpimsettingsModglobalsettings Runtime Errors Getsnmpimsettings ParametersModsnmpimsettings Parameters ModsnmpimsettingsModsnmpimsettings Runtime Errors Cleareventlog Runtime Errors CleareventlogCleareventlog Parameters Updateribfirmware Updateribfirmware ParametersUpdateribfirmware Runtime Errors Getfwversion Return Messages Getfwversion Runtime ErrorsGetfwversion Getfwversion ParametersHotkeyconfig Parameters HotkeyconfigLicense Hotkeyconfig Runtime ErrorsLicense Parameters License Runtime ErrorsDirinfo Parameters GetdirconfigDirinfo Runtime Errors DirinfoGetdirconfig Parameters Getdirconfig Runtime ErrorsGetdirconfig Return Messages Moddirconfig Parameters ModdirconfigRackinfo Moddirconfig Runtime ErrorsRackinfo Runtime Errors ModbladerackRackinfo Parameters Modbladerack Parameters Getdiagportsettings Runtime Errors GetdiagportsettingsModbladerack Runtime Errors Getdiagportsettings ParametersModdiagportsettings Getdiagportsettings Return MessagesModdiagportsettings Parameters Gettopology Moddiagportsettings Runtime ErrorsServerinfo Gettopology ParametersGettopology Return Message Gethostpowerstatus Serverinfo Runtime ErrorsServerinfo Parameter Gethostpowerstatus Return Messages SethostpowerGethostpowerstatus Parameters Gethostpowerstatus Runtime ErrorsResetserver Sethostpower ParametersSethostpower Runtime Errors Presspwrbtn Parameters Resetserver ParametersResetserver Errors PresspwrbtnHoldpwrbtn Parameters Presspwrbtn Runtime ErrorsHoldpwrbtn Runtime Errors HoldpwrbtnColdbootserver Coldbootserver ParametersColdbootserver Runtime Errors Getuidstatus WarmbootserverWarmbootserver Parameters Warmbootserver Runtime ErrorsUidcontrol Getuidstatus ParametersGetuidstatus Response Insertvirtualmedia Parameters Uidcontrol ErrorsInsertvirtualmedia Uidcontrol ParametersInsertvirtualfloppy Runtime Errors Ejectvirtualmedia Runtime Errors EjectvirtualmediaEjectvirtualmedia Parameters Getvmstatus Return Messages Getvmstatus Runtime ErrorsGetvmstatus Getvmstatus ParametersSetvmstatus Parameters SetvmstatusSetvmstatus Runtime Errors ILO Parameters Table ILO ParametersGlobal Settings ILO Parameters 333 SNMP/Insight Manager Settings ILO Parameters 335 ILO Status Server Status Parameters Server NameServer ID User Administration Parameters Virtual Power and Reset PasswordAdminister User Accounts Remote Console AccessPass-Through Configuration Idle Connection Timeout MinutesEnable Lights-Out Functionality Enable iLO RbsuRemote Console Data Encryption Require Login for iLO RbsuRemote Console Port Configuration Show iLO During PostVirtual Media Port Terminal Services PortWeb Server Non-SSL Port Web Server SSL PortNetwork Settings Parameters Serial Command Line Interface StatusSerial Command Line Interface Speed bits/second Minimum Password LengthSpeed Enable NICShared Network Port Transceiver Speed AutoselectILO IP Address Registering with Wins ServerRegistering with DNS Server Ping Gateway on StartupDhcp Server ILO Gateway IP AddressILO Subsystem Name Domain NameSnmp Alert Destinations SNMP/Insight Manager Settings ParametersEnable iLO Snmp Alerts Enable Snmp Pass-ThroughILO Advanced Pack License Key ILO Advanced License Activation SettingsInsight Manager Web Agent URL Level of Data ReturnedBay Rack NameEnclosure Name Bay NameDirectory Settings Parameters Power SourceEnable Automatic Power On Enable Rack Alert Logging IMLDirectory Server Address Enable Directory AuthenticationEnable Local User Accounts LOM Object PasswordTesting Directory Settings Click Test SettingsClick Start Test Core Attributes Directory Services SchemaHP Management Core Ldap OID Classes and Attributes Core ClassesCore Class Definitions HpqTargetHpqRole HpqRoleMembership Core Attribute DefinitionsHpqPolicy HpqPolicyDNHpqRoleIPRestrictionDefault HpqTargetMembershipHpqRoleIPRestrictions Directory Services Schema 357 HpqRoleTimeRestrictionLights-Out Management Attributes Lights-Out Management ClassesLights-Out Management Class Definitions Lights-Out Management Attribute DefinitionsHpqLOMv100 HpqLOMRightLogin HpqLOMRightRemoteConsoleHpqLOMRightVirtualMedia HpqLOMRightServerReset HpqLOMRightLocalUserAdminHpqLOMRightConfigureSettings Page Minimum Requirements Troubleshooting iLOILO Post LED Indicators Troubleshooting iLO 365 FEH Code Consistency Check Explanation Event Log EntriesTroubleshooting iLO 367 User Guide Integrated Lights-Out Troubleshooting iLO 369 Hardware and Software Link-Related Issues MS-DOS Error CodesLogin Issues HardwareSoftware Login Name and Password Not Accepted ILO Management Port Not Accessible by NameDirectory User Premature Logout Inability to Access the Login ILO Rbsu Unavailable after iLO and Server ResetInability to Access iLO Using Telnet Inability to Connect to iLO after Changing Network SettingsInability to Connect to the iLO Diagnostic Port Inability to Connect to the iLO Processor through the NIC Firewall Issues Proxy Server Issues Troubleshooting Alert and Trap ProblemsAuthentication Code Error Message ILO Security Override SwitchLocal USB Mouse and Linux Troubleshooting Mouse ProblemsRemote Console Mouse Control Issue Mouse Issue Using SuSE LinuxTroubleshooting Remote Console Problems Emulating a PS/2 Keyboard in a Headless Server EnvironmentLinux Remote Console User Guide Integrated Lights-Out Remote Console Text Window not Updating Properly PuTTY Client Unresponsive with Shared Network Port Troubleshooting SSH and Telnet ProblemsRemote Console Turns Grey or Black Initial PuTTY Input SlowSSH Text Support from a Remote Conosle Session Troubleshooting Terminal Services ProblemsTerminal Services Button Is Not Working Terminal Services Proxy Stops RespondingVideo Applications not Displaying in the Remote Console Troubleshooting Video and Monitor ProblemsGeneral Guidelines Telnet Displays Incorrectly in DOSVirtual Media Applet has a Red X and Will Not Display Troubleshooting Virtual Media ProblemsTroubleshooting Miscellaneous Problems Virtual Drive ListingCookie Sharing Between Browser Instances and iLO Shared InstancesCookie Order Behavior Troubleshooting iLO 389 Displaying the Current Session Cookie Preventing Cookie-Related User IssuesIncorrect Time or Date of the Entries in the Event Log Inability to Upgrade iLO FirmwareILO Network Flash Recovery Diagnostic StepsFlash Recovery Process ROMPaq ILO Does Not Respond to SSL Requests Testing SSLRequest New Certificate Resetting iLOServer Name Still Present after Erase Utility is Executed Troubleshooting a Remote HostTechnical Support HP Contact InformationBefore You Contact HP User Guide Integrated Lights-Out Acronyms and Abbreviations DAV ILO JVM MTU RDP SSL Page Index LAN Index Uidcontrol