topic Re: Directory Integration iLo v1 in Server Management - Remote Server Management

Directory Integration iLo v1

René Johnen — Fri, 06 Aug 2010 12:35:45 GMT

Hi

We want integrate Directory Authentification for iLo v1. And i have many Problems with that.

1. IÂ´ve built a testserver with Windows Server 2003 SE. This Server is a domaincontroller for the domain test.local.
2. On the same server, iÂ´ve integrate a certifiate authority.
3. in the grouppolices iÂ´ve done the automatic registration for the certificate.
4. I make the user test and the group testgroupilo. The user test in the group testgroupilo.
5 In iLo i have this options
Directory Server Address: IP from the DC
Directory Server LDAP Port: 636
Directory User Context 1:CN=testgroupilo,CN=users,DC=test,DC=local

Now the Test has the folling results

The Informations in the Directory Test Controls
Test User Name: CN=test,CN=users,DC=test,DC=local
Test User Password: Tester01.
(that is the same in AD)

What is wrong in my Options?

Re: Directory Integration iLo v1

barnett chan — Mon, 09 Aug 2010 13:29:38 GMT

Make sure your network settings reflect the same for Domain, and DNS settings. Try to change the Directory Server Address from IP to the domain name (test.local). Do a nslookup to make sure it resolves your dns correctly. Ping test.local, and it should reply to the ping. If ping does not reply, check your DNS settings.

Re: Directory Integration iLo v1

René Johnen — Mon, 09 Aug 2010 13:42:07 GMT

My DNS Server is the same as the AD-Server

The IP 10.20.63.19 is for the dc and dns. This Adresses have i fill in the options.

In DNS i have taken the option secure and non-secure updates.

Re: Directory Integration iLo v1

barnett chan — Mon, 09 Aug 2010 17:31:48 GMT

Is the nslookup reporting correctly? Make sure to turn off IPv6 if you have it enabled. This will make troubleshooting easier.
Keep everything basic, and add a user in the Users container, like "test user". Make him part of the "hprole". Try to log on with "test user", and see if you can logon to iLO.

Re: Directory Integration iLo v1

René Johnen — Tue, 10 Aug 2010 06:12:28 GMT

OK The Testsettings are ok. ;)

I have 3 Users:
1. testuser (allowed to use ilo)
2. testallowed (allowed to use ilo)
3. testnotallowed (not allowed to use ilo)

In the testsetting is all ok. If i test User 3 it says me, user have not login rights. But if i login with the account 3, ilo allowed me to use ilo. Thats incorrectly.
Perhaps can be based the following Error

Re: Directory Integration iLo v1

barnett chan — Tue, 10 Aug 2010 13:26:02 GMT

You need to disable the security override. It may be a dip switch or a jumper setting. Look on your system hood for information on how to disable it. If security override enabled, anyone can logon to iLO.

Re: Directory Integration iLo v1

René Johnen — Wed, 11 Aug 2010 06:13:38 GMT

ok iÂ´m understand.
Where can I disable the security override?
Can I configure it in iLo, or must i install the HP Agents?

Re: Directory Integration iLo v1

barnett chan — Wed, 11 Aug 2010 15:00:59 GMT

This is a hardware setting. It may be a switch or a jumper. On iLO 1, it may be a jumper. It will be labeled as iLO Override on the Server hood label. The label may be on top or inside the hood.

Re: Directory Integration iLo v1

René Johnen — Thu, 12 Aug 2010 08:57:47 GMT

Ok now i can use the AD-authetification. Thank you