topic Re: iLO 2 - AD authentication - Default Schema in Server Management - Remote Server Management

iLO 2 - AD authentication - Default Schema

Jim Cochran — Fri, 24 Oct 2008 04:59:43 GMT

I am only able to logon when I use the distinguished name for my account which leads me to believe that the "Directory User Context" is not configured properly.

I have configured the "Directory User Context 1" with the DN of the OU where my user account is located in active directory.

I've noticed that in all of the examples on all of the threads, a "container" is always used.

ex. CN=Users,DC=MyDomain,DC=Com

Is there a known issue if my account is located in an OU instead of a container? Or maybe my syntax is wrong?

ex. OU=Administrators,OU=IT,OU=US,DC=MyDomain,DC=COM

Re: iLO 2 - AD authentication - Default Schema

LC... — Fri, 24 Oct 2008 16:30:13 GMT

Your syntax looks correct. Have you tried to login using "Display Name" of your AD account?

God Bless,
LC...

Re: iLO 2 - AD authentication - Default Schema

Jim Cochran — Fri, 24 Oct 2008 16:42:45 GMT

Yes, I have tried displayName.

Thanks,

Jim

Re: iLO 2 - AD authentication - Default Schema

Cederberg — Thu, 30 Oct 2008 06:14:33 GMT

check out this manual to verify your settings..

http://bizsupport.austin.hp.com/bc/docs/support/SupportManual/c00190541/c00190541.pdf

Re: iLO 2 - AD authentication - Default Schema

Jim Cochran — Thu, 30 Oct 2008 14:56:12 GMT

Thanks, I have that manual and it really only goes so far.

I believe that everything is set up correctly as I am able to logon with a DN. When I logon with another format, I get "user object not found". This leads me to believe that iLO is not looking in the right place for the account.

With that said, I've set up other LDAP application in the past and script quite a bit, so I'm pretty familiar with how this all works, but I'm obviously missing something.

In the manual, all of the examples for "Directory User Context" use "Containers" and not OUs and I'm wondering if that is the problem. We don't use the default containers as they are a security risk.

Re: iLO 2 - AD authentication - Default Schema

thirusrinivasan — Wed, 12 Nov 2008 05:47:18 GMT

Hi

Your syntax is correct. You can use Containers or OUs or leave the directory Context blank. This is a placeholder so it can make a easy and quick search.

If you can login with DN ONLY and not domainname\username format, try this.

GO to Internet Explorer - Tools - Internet Options - Intranet (choose the appropriate zone) - Go to ActiveX controls and Plugins -
"Initialize and script ActiveX Controls not marked as safe for scripting" - Set it to prompt.

Try loggin in with the domainname\username format. Good luck

Re: iLO 2 - AD authentication - Default Schema

Jim Cochran — Wed, 12 Nov 2008 16:01:04 GMT

Perfect. It worked!