topic Re: ILO schema-less AD integration Problem in Server Management - Remote Server Management

ILO schema-less AD integration Problem

Ronny Brehm — Tue, 11 Dec 2007 15:56:19 GMT

I set up about 10 ILO and ILO2 cards with schema-less AD integration. I noticed that when I connect to them via DNS name it works. But if I connect to them directly through IP then it doesn't.

Anyone have any ideas?

Re: ILO schema-less AD integration Problem

Ronny Brehm — Tue, 11 Dec 2007 16:49:56 GMT

Not sure why this helped but once I put a user context string in that pointed to my Users directory it works via IP and DNS name.

Thanks,

Re: ILO schema-less AD integration Problem

M.S.Srivatsa — Wed, 12 Dec 2007 12:41:04 GMT

Refer to the white paper,
Integrating HP ProLiant Lights-Out processors with MicrosoftÂ® Active Directory
http://bizsupport.austin.hp.com/bc/docs/support/SupportManual/c00190541/c00190541.pdf

One other suggestion is,
Please modify the following settings from the Network settings page which would help the directory user to login with "Email"(loginname@domain) and "NetBios name"(domain/loginname) formats.

Primary/Secondary/Tertiary DNS Server
The Primary/Secondary/Tertiary DNS server IP address should be same as the Active directory server IP address.

Domain Name
This domain should be same as the domain for which the Active directory server is configured.

Re: ILO schema-less AD integration Problem

Ronny Brehm — Thu, 13 Dec 2007 15:26:55 GMT

Do you know which security settings inside Internet Explorer give the ability to use domain\username? I know it requires ActiveX and I was able to get it to work on my box by setting the local intranet security settings to low. I can't seem to isolate the exact setting that allows it so I can tell everyone else that will use ILO how they can use domain\username instead of their full name.

Thanks,

Re: ILO schema-less AD integration Problem

M.S.Srivatsa — Tue, 18 Dec 2007 12:50:10 GMT

Please enable the ActiveX controls in the internet explorer(IE 6) as under:
1.Goto Internet explorer->security
2.Choose the appropriate sites
3.set the ActiveX controls to enable/prompt.
Please refer to Page 172 of the following iLO user guide which gives information on troubleshooting directory issues.
http://bizsupport.austin.hp.com/bc/docs/support/SupportManual/c00209014/c00209014.pdf

Re: ILO schema-less AD integration Problem

Ronny Brehm — Tue, 18 Dec 2007 16:13:00 GMT

Found it. Under IE7 you have to set the "Initialize and script ActiveX controls not marked as safe for scripting" to prompt or enabled for the Local Intranet Zone. Once this is set I can connect directly with domain\username and username@domain.

This request can be closed.

Thanks again.

Re: ILO schema-less AD integration Problem

Ronny Brehm — Tue, 18 Dec 2007 16:13:30 GMT

Done