176 User Guide Integrated Lights-Out

c.Then, using the Lights Out Management Device Rights subtab of the HP Management tab, select the check box next to Login, and click Apply and Close. Members of the remoteMonitors role will be able to authenticate and view the server status.

User rights to any Integrated Lights-Out device are calculated as the sum of all the rights assigned by all the roles in which the user is a member, and in which the Integrated Lights-Out device is a Managed Device. Following the preceding examples, if a user is in both the remoteAdmins and remoteMonitors roles, they will have all the rights, because the remoteAdmins role has those rights.

To configure a Integrated Lights-Out device and associate it with a Lights-Out Management object used in this example, use settings similar to the following on the Directory Settings screen.

NOTE: Commas, not periods, are used in LDAP distinguished names to separate each component.

RIB Object DN = cn=rib-email-server,ou=hp devices,ou=region1,o=samplecorp

Directory User Context 1 = ou=users,o=samplecorp

For example, user CSmith, located in the users organizational unit within the samplecorp organization, who is also a member of one of the remoteAdmins or remoteMonitors roles, would be allowed to log in to the iLO. They would type csmith (case insensitive) in the Login Name field of the iLO login screen and use their eDirectory password in the Password field of that screen to gain access.

Directory Services Objects for eDirectory

Directory Services objects enable virtualization of the managed devices and the relationships between the managed device and user or groups already contained within the directory service.

Page 176
Image 176
HP Integrated Lights-Out manual Directory Services Objects for eDirectory