Server Management - Remote Server Management
1748233 Members
3442 Online
108759 Solutions
New Discussion юеВ

Re: Privileges of group accounts (iLO)

 
SOLVED
Go to solution
drewjess_sky
New Member

Re: Privileges of group accounts (iLO)

hitting an issue with unsetting values with DIR_GRPACCT, too.  

i want to configure two groups and unconfigure all others

if you pass in XML like so:

<DIR_GRPACCT1_NAME value="Authenticated Users"/>
<DIR_GRPACCT1_PRIV value="6"/>
<DIR_GRPACCT1_SID value="S-1-5-11"/>

<DIR_GRPACCT2_NAME value="unixgroup"/>
<DIR_GRPACCT2_PRIV value="1,2,3,4,5,6"/>
<DIR_GRPACCT2_SID value=""/>

<DIR_GRPACCT3_NAME value=""/>
<DIR_GRPACCT3_PRIV value=""/>
<DIR_GRPACCT3_SID value=""/>

<DIR_GRPACCT4_NAME value=""/>
<DIR_GRPACCT4_PRIV value=""/>
<DIR_GRPACCT4_SID value=""/>

<DIR_GRPACCT5_NAME value=""/>
<DIR_GRPACCT5_PRIV value=""/>
<DIR_GRPACCT5_SID value=""/>

<DIR_GRPACCT6_NAME value=""/>
<DIR_GRPACCT6_PRIV value=""/>
<DIR_GRPACCT6_SID value=""/>

iLO 2.30 accepts this XML and returns no errors, however any groups that are configured as 3, 4, 5 and 6 are left intact.

the documentation does not show how to remove configuration despite the fact that it must be possible, as there's a "remove group" button on the web frontend.

any advice, HP? :)

 

Seppy
New Member

Re: Privileges of group accounts (iLO)

I've encountered the very same thing with firmware 2.30.    If by any chance you set the group you are trying to clear to an arbitrary group name, does it auto-populate login privileges, regarless of the PRIV values you assign?    That was surprising to me.    I've attempted clearing those groups via WebUI (successful), but even after cleaning up, the problem comes back if you add a group, and then attempt to clear it with a null string.    return code 0, no errors logged very frustrating.    Not all version 2.30 firmware impacted seem to be impacted.     Attempted a reboot of the iLO interface, and that made no impact.     I cannot reset the interface to defaults.   It appears that the issue is impacting close to 50% of them though with 700+ interfaces  360 impacted by this.

Jean Paul Beerens
Occasional Advisor

Re: Privileges of group accounts (iLO)

HP: "We fixed the empty string issue when removing Directory Group Names and Privileges via XML script in iLO2 2.05 and iLO3 1.20" ...

Questions

And why is not working on the latest Ilo4 firmware 2.40/2.42?

So far no luck with either powershell or xml

 

Jean Paul Beerens
Occasional Advisor

Re: Privileges of group accounts (iLO)

Hi HP

You guys are so funny ... Guess what, you fixed it again in the new new ilo4 firmware 2.44

Oscar A. Perez
Honored Contributor

Re: Privileges of group accounts (iLO)

So, to summarize:   It is fixed in iLO2 v2.05, iLO3 v1.20 and now iLO4 v2.44

 

 




__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!