- Community Home
- >
- Servers and Operating Systems
- >
- HPE ProLiant
- >
- Server Management - Remote Server Management
- >
- Re: ILO and Active Directory Integration
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2007 05:16 AM
тАО01-11-2007 05:16 AM
ILO and Active Directory Integration
Unable to authenticate test user user@domain.com
Ceasing tests.
If I try using the domain\user logon method I get the following response:
Unable to authenticate test user domain\user [Invalid credentials]
Ceasing tests.
I have tried just about everything I can think of. One thing I have noticed is that the test for Directory User Context 1 is not being run before it attempts to validate my account. How can it do that? Shouldn't it validate my context before it attempts to validate my logon credentials?
This is very frustrating. Can anyone who has made this work without extending their schema lend me some assistance?
Thanks,
Tim
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2007 07:17 AM
тАО01-11-2007 07:17 AM
Re: ILO and Active Directory Integration
However, if the credentials fail and if none of the contexts work either, then none of them can be validated.
It would not get to this stage if there was not a directory server responding, so that is probably okay. Perhaps there is some ambiguity in the username.
Do you know the fully distinguished username to try using that?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2007 02:05 AM
тАО01-12-2007 02:05 AM
Re: ILO and Active Directory Integration
try run the ilo test with your display name as well.
If you do not have active x running on your pc try using your display name eg joe bloggs.
If you do not have active x running on your pc try using your acount name. username@domain.com or domain\username.
I did get directory integration to work without schema changes.
steven
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2007 02:31 AM
тАО01-12-2007 02:31 AM
Re: ILO and Active Directory Integration
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1005787
this is the info I use to get the integration to work.
steven
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-15-2007 03:43 AM
тАО01-15-2007 03:43 AM
Re: ILO and Active Directory Integration
I will follow up on the other ideas and let you know what I find out.
Tim
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-17-2007 01:07 AM
тАО01-17-2007 01:07 AM
Re: ILO and Active Directory Integration
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-17-2007 04:25 AM
тАО01-17-2007 04:25 AM
Re: ILO and Active Directory Integration
Here are the results of my login attempts:
Full Qualified Name - Successful login
domain\username - Invalid credentials
username@domain - unable to authenticate no reason given
Any other ideas?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-17-2007 08:44 PM
тАО01-17-2007 08:44 PM
Re: ILO and Active Directory Integration
however when I try to login to the ilo from my pc I could login as domain\username or username@domain.com with activx enabled.
I hope this helps.
steven
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-19-2007 02:25 AM
тАО01-19-2007 02:25 AM
Re: ILO and Active Directory Integration
The Login page to iLO uses ActiveX to resolve the username with greater precision.
The iLO Directory settings test page does not use ActiveX. In he iLO directory tests case, the only resolution attempted is by applying the search contexts. This implies that you may have greater credentials flexibility on the login page than on the directory tests page.
As far as the tests, the credentials must be authenticated before any of the successive memberships can be applied. However, the search contexts are applied in an attempt to authenticate; they just cannot be validated unless they are part of a successful authentication.
You might want to install a search context like
ou=ouname,dc=domain,dc=com
or
@domain.com
and then iLO will apply the username to those search contexts. Of course, if the directory service rejects them...
You may want to try using a different tool to access the directory: the LDP tool that ships with Windows.
Try a simple ldap authentication using the same name/password. Use the "SIMPLE" method under the "Advanced" area of the Bind dialog and do not use the "domain" checkbox or text. Type the name as given to ilo "domain\username" or "user@domain" in the username box. LDP will give you more details on why the invalid credentials error is occurring.