IPM and Active Directory integrated iLO2.

[Micke_Ch_1]

Hi!

I have Active Directory integrated iLO2 and try to implement IPM on these iLO2.
When I try to reach iLO2 with the AD-account nothing happened except for the error:
"Unable to communicate with in because it does not have an iLO Advanced or iLO Select license. Please ensure the iLO 2 is licensed"

But when I then tried with local account on iLO2 and put the credential in IPM option it begun working directly.

Is this a bug in IPM??
Is it not possible to use AD-account when implementing IPM??

Best Regards
/Mikael Christenson

[Sharath K S]

Hi,
Right now(IPM 1.40) requires iLO2 credential to be given IPM options page.

But the error message given is not because of the mismatched credential. It is because of the iLO license information absence in SIM. If it is due to credential mismatch then the error message would have been "Unable to log in to in due to incorrect or missing credentials. Please ensure correct credentials are entered on the Insight Power Manager options page."

Can you give the steps followed? also you can refer the troubleshooting tip section of IPM user guide for more info on probable error messages and resolutions.
http://bizsupport.austin.hp.com/bc/docs/support/SupportManual/c00845879/c00845879.pdf

[Micke_Ch_1]

Hi!

Let me rewrite the question!

Is it possible to use AD-account when implementing IPM??

Because I have all iLO 2 licensed with Select or Advanced Pack.

And when I created local accounts on the iLO 2 then it start working.
I have read the whole IPM User Guide.
Nothing in there.

Thanks
/Micke Christenson

[V Deepak Kumar]

Yes, there is no menion of Active directory user configuration usage with IPM in user guide.

Make sure
1) iLO2 has Select/Advanced license for both IPM and Active Directory to work.
2) Make sure you can login to the iLO2 from browser with AD-account credentials.
3) One important thing that you muse make sure is , IPM uses RIBCL commands to communicate with iLO2 and RIBCL commands will work only with the followig user name formats
Formats for Directory authentication
a) User name or short name [example Administrator]
b) Full Distinguished name (FQDN)

What will not work -
UserName = userlogin@domain
UserName = domain/userlogin

With iLO Browser interface, all the above formats work.

Hope this information helps. Let me know about your AD account user name format.
Thanks
Deepak

[V Deepak Kumar]

In effect IPM should work with Active user accounts for the following
AD-Account User Name Formats
a) User name or short name [example Administrator]
b) Full Distinguished name (FQDN)
What will not work -
UserName = userlogin@domain
UserName = domain/userlogin

This is because IPM uses RIBCL commands to communicate with iLO2 and RIBCL commands will work only with the above mentioned user name formats
Thanks
Deepak

[V Deepak Kumar]

Also just in case make sure,
SSH is enabled on ILO Administrator->Access section in ILO GUI and the SSH port number is configured to the same as in SIM->Options>Insight Power Manager Options.
Thanks
Deepak

[V Deepak Kumar]

Typo:
It was Web Server SSL Port.
Thanks
Deepak