144 User Guide Integrated Lights-Out

•Single point of administration—You can use native administrative tools like MMC and ConsoleOne to administrate Lights-Out users.

•Immediacy—A single change in the directory rolls-out immediately to associated Lights-Out processors. This eliminates the need to script this process.

•Elimination of another username and password—You can use existing user accounts and passwords in the directory without having to record or remember a new set of credentials for Lights-Out.

•Flexibility—You can create a single role for a single user on a single iLO, or you can create a single role for multiple users on multiple iLOs, or you can use a combinations of roles as is suitable for your enterprise.

•Compatibility—Lights-Out directory integration applies to iLO, RILOE and RILOE II products. The integration supports the popular Active Directory and eDirectory.

•Standards—Lights-Out directory support builds on top of the LDAP 2.0 standard for secure directory access.

Features Supported by Directory Integration

iLO Directory Services functionality enables you to:

•Authenticate users from a shared, consolidated, scalable user database.

•Control user privileges (authorization) using the directory service.

•Use roles in the directory service for group-level administration of iLO management processors and iLO users.

Installing Directory Services for iLO requires extending the directory schema. Extending the schema must be completed by a Schema Administrator.

The local user database is retained. You can decide not to use directories, to use a combination of directories and local accounts, or use directories exclusively for authentication.

NOTE: When connected through the Diagnostics Port, the directory server is not available. You can log in using a local account only.