Granting AD groups access to iLO using cpqlocfg.exe

MerryMerryMay — Wed, 07 Mar 2012 06:17:49 GMT

Hi,

I'm tring to write an XML file to configure iLO on a number of our servers. I would like to have some properties defined from the command line, rather than from within the xml file. One thing that I can not get working is granting an AD group access to iLO. I've stripped down my XML file so it only does this task. However I simply cannot get the namevalueproperties thing to work. My XML file is:

<RIBCL VERSION="2.0">
	<LOGIN USER_LOGIN="Administrator" PASSWORD="Password">
		<DIR_INFO MODE="write">
			<MOD_DIR_CONFIG>
				<DIR_GRPACCT1_NAME value=%AdministratorsGroup%/>
				<DIR_GRPACCT1_PRIV VALUE="1,2,3,4,5"/>
			</MOD_DIR_CONFIG>
		</DIR_INFO>
	</LOGIN>
</RIBCL>

The command line I'm using to execute is:

cpqlocfg -s ilo-hostname -u Administrator -p Password -f test.xml -t AdministratorsGroup='"CN=ILO_Group,OU=test,DC=my,DC=domain"'

The error I get is:

1 - Syntax error: Line #7: syntax error near "=" in the line: "<DIR_GRPACCT1_NAME value=%AdministratorsGroup%/>"

What I've done looks like it is straight out of the iLO guide on page 15 (http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02774508/c02774508.pdf).

Can anyone tell me what I'm doing wrong?

Re: Granting AD groups access to iLO using cpqlocfg.exe

Oscar A. Perez — Wed, 07 Mar 2012 15:51:54 GMT

I believe you stripped down your XML way too much. iLO might be requiring some of the tags you removed to be able to process the script.

Try adding back

<DIR_AUTHENTICATION_ENABLED value="Yes"/>

and if you still get the error, add back

<DIR_ENABLE_GRP_ACCT value = "yes"/>

topic Re: Granting AD groups access to iLO using cpqlocfg.exe in Server Management - Remote Server Management

Granting AD groups access to iLO using cpqlocfg.exe

Re: Granting AD groups access to iLO using cpqlocfg.exe