ProLiant Servers (ML,DL,SL)
cancel
Showing results for 
Search instead for 
Did you mean: 

iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

SOLVED
Go to solution
vegitus
Occasional Collector

iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Helo Everyone

With iLO5 some new privileges for DirectoryGroups. I know from the this disscusion (https://community.hpe.com/t5/ProLiant-Servers-ML-DL-SL/iLO-5-LDAP-group-permissions-using-PowerShell/td-p/6994601), that the ilo Powershell Modul 2.0 can't add Directory Groups with all permissions. But is there any way, to do that over the Redfish interface? I looked for it on diffrent sites and could't find anything.
This is my first pose so sorry if i did somthing wrong :).

Thanks for your help.

Vegi

3 REPLIES
Guru_Verma
HPE Pro
Solution

Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

HPE redfish schema is expanding for managing iLO5 extensively, but for this specific query per my research and insight, we still need to wait for future snaps of Gen10 to script all of them.


Untill then it can be achieved by following manuall p
rocedure:

1. Click Administration in the navigation tree, and then click the Directory Groups tab. 2. Click New. 3. Provide the following details in the Group Information section: • Group DN • Group SID (Kerberos authentication and Active Directory integration only) 4. Select from the following privileges: • Login • Remote Console • Virtual Power and Reset • Virtual Media • Host BIOS • Configure iLO Settings • Administer User Accounts • Host NIC • Host Storage • Recovery Set 5. To save the new directory group, click Add Group.

Refer: https://support.hpe.com/hpsc/doc/public/display?docId=a00026409en_us

 

I am HPE Employee

If it resolves the issue, please like and consider marking it as an Accepted Solution.

The comments in this post are my own and do not represent an official reply from the company.

Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Hi,

is there a solution planned? We set a lot of configurations of iLO boards automatically using the iLO scripting tools, but we cannot use the new and more granular settings from the iLO5 without a working cmdlet for the directory settings.

regards

Tom

 

GokulKS
Trusted Contributor

Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Hi Tom,

I am afraid that you can't do automation through iLO Scripting cmdlets for iLO5 servers.

But its true that ilo cmdlets 2.0.x version is currently does not support all permissions of directory support functionality because of iLO5 not exposing required REST interfaces. The plan is to have these interfaces coming in 1HCY19 and after that we will follow up release from iLO cmdlets to support it.

Thanks,

Gokul

Don't forget to give Kudos if the problem got resolved or like suggestion.