ProLiant Servers (ML,DL,SL)
cancel
Showing results for 
Search instead for 
Did you mean: 

Problem configuring ilo AD Integration on ESX 5.5 using HPONCFG with iLo4 firmware above 1.51

 
Bob Curnock
Advisor

Problem configuring ilo AD Integration on ESX 5.5 using HPONCFG with iLo4 firmware above 1.51

As part of our automated ESX 5.5 build we run HPONCFG 4.4 with an XML to configure AD Integration on ilo4. This has previously worked fine with firmware 1.51. 

 

 

<RIBCL VERSION="2.1">
<LOGIN USER_LOGIN="Administrator" PASSWORD="xxxxxx">
<DIR_INFO MODE="write">
<MOD_DIR_CONFIG>
    <DIR_AUTHENTICATION_ENABLED VALUE="Y"/>
    <DIR_LOCAL_USER_ACCT VALUE="Y"/>
    <DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>
    <DIR_SERVER_PORT VALUE= "636"/>
    <DIR_USER_CONTEXT_1 VALUE= "OU=Privileged User Accounts,OU=SpecAcct,DC=contoso,DC=microsoft,DC=com"/>
    <DIR_USER_CONTEXT_2 VALUE= " "/>
    <DIR_USER_CONTEXT_3 VALUE= " "/>
    <DIR_ENABLE_GRP_ACCT VALUE="Y"/>
    <DIR_GRPACCT1_NAME VALUE= "CN=ilo users,CN=Users,DC=contoso,DC=Microsoft,DC=com"/>
    <DIR_GRPACCT1_PRIV VALUE= "1,2,3,4,5"/>
    <DIR_GRPACCT2_NAME VALUE= "a"/>
    <DIR_GRPACCT2_PRIV VALUE= "2"/>
    <DIR_GRPACCT3_NAME VALUE= "b"/>
    <DIR_GRPACCT3_PRIV VALUE= "2"/>
</MOD_DIR_CONFIG>
</DIR_INFO>
</LOGIN>
</RIBCL>

 

The Latest DL380 Gen8's have been delivered with Firmware 2.05 and the XML script now fails at

 

   <DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>

</-- ERROR :      STATUS= 0x0001

     MESSAGE= Directory server address is not a valid domain name or IP address. -->

 

(I have replaced our IP and Domain details with ramdom ones)

 

 

If we downgrade firmware to 1.51 it works. I have checked the latest "HP ESXi Utilities Offline bundle for VMware vSphere 5.5" and 4.4 is the latest available version of HPONCFG.

 

Any ideas?

 

 

2 REPLIES
Cederberg
Honored Contributor

Re: Problem configuring ilo AD Integration on ESX 5.5 using HPONCFG with iLo4 firmware above 1.51

Hi.

 

Have you tried entering a singel IP address as DIR_SERVER_ADDRESS VALUE?  i'm thinking maybe they have added som kind of verification and the comma or the lenght is triggering it. Just a guess.

 

Regards

//Cederberg

Bob Curnock
Advisor

Re: Problem configuring ilo AD Integration on ESX 5.5 using HPONCFG with iLo4 firmware above 1.51

When I run a GET_DIR_CONFIG XML via HPONCFG (after manually updating IP's via the GUI) I get

 

!-- HPONCFG VERSION = "4.4-0.0" -->

<!-- Generated 6/30/2015 10:49:46 -->

<RIBCL VERSION="2.1">

<LOGIN USER_LOGIN="Administrator" PASSWORD="password">

<DIR_INFO MODE="write">

<MOD_DIR_CONFIG>

<DIR_AUTHENTICATION_ENABLED VALUE = "Y"/>

<DIR_LOCAL_USER_ACCT VALUE = "Y"/>

<DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>

<DIR_SERVER_PORT VALUE = "636"/>

<DIR_OBJECT_DN VALUE = ""/>

<DIR_OBJECT_PASSWORD VALUE = ""/>

<DIR_USER_CONTEXT_1 VALUE = "OU=Privileged User Accounts,OU=SpecAcct,DC=Contoso,DC=microsoft,DC=com"/>

<DIR_USER_CONTEXT_2 VALUE = ""/>

<DIR_USER_CONTEXT_3 VALUE = ""/>

</MOD_DIR_CONFIG>

</DIR_INFO>

 

so it can understand there are 2 addresses - but feeding that back in as an XML file it still fails on the address.