Unable to modify ILO Administrator user

[Andrey_TS1]

Hello, I will appreciate every advice on this issue.

I have ML350 Gen9 server, I'm using hponcfg.exe utility for ILO port automatic configuration.

I successfully logon ILO management with active Administrator user and password. When I'm trying to modify Administrator user with hponcfg.exe I get error message : User Login name was not found. 

<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="Administrator" PASSWORD="validpassword">
<USER_INFO MODE="write">
<MOD_USER USER_LOGIN="ILO_admin">
<PASSWORD value="newpassword"/>
</MOD_USER>
</USER_INFO>

/RIBCL>

I successfully logon using user: Administrator  password: validpassword

Why does the script fail with error message "User Login name was not found" ?

Thank you in advance.

[iLOdude]

That script attempts to modify the password of an user called "ILO_admin".   Does that use exist?

[Andrey_TS1]

I was assumed the this script modifes user loging Administractor to ILO_admin as well modifies password for new.

That is actually what I need to change Administrator login name to new one.

Thank you !

[Jimmy Vance]

You need to provide the user name of the account you want to modify for  <MOD_USER USER_LOGIN="username">

<RIBCL VERSION="2.0">
   <LOGIN USER_LOGIN="adminname" PASSWORD="password">
      <USER_INFO MODE="write">
         <MOD_USER USER_LOGIN="username">
            <USER_NAME value="displayname"/>
            <USER_LOGIN value="newusername"/>
            <PASSWORD value="newpassword"/>
            <ADMIN_PRIV value="Yes"/>
            <REMOTE_CONS_PRIV value="No"/>
            <RESET_SERVER_PRIV value="Yes"/>
            <VIRTUAL_MEDIA_PRIV value="Yes"/>
            <CONFIG_ILO_PRIV value="Yes"/>           
         </MOD_USER>
      </USER_INFO>
   </LOGIN>
</RIBCL>

For our labs the procedure is to not modify the default administrator account or password.  Create new accounts with administrator privileges.  By doing this you can always look at the toe tag and access the system via the default credentials. If someone screws up the default account recovering can be a minor hassle.

[Andrey_TS1]

Thank you for clarification !

I've tried both to modify and to add new user, works very well.

For  production environment I guess modification of default admin user would be more secured , isnt it ?

What is your recommendation as best practice ?

Thank you

[Jimmy Vance]

---

For  production environment I guess modification of default admin user would be more secured , isnt it ?

What is your recommendation as best practice ?

---

If the system is in an unsecured location where anyone can look at the tag, I'd probably recommend changing the default. If the server is in a secure location you probably have larger issues if you need to worry about it.