iLO 2 LDAP authentication

[rmakogon]

Hello,

I just setup LDAP server (not windows AD) and configured iLO 2 to authenticate against it. Everything seem good until I entered wrong password and *surprise* I was in!

Here are my iLO settings:

Use Directory Default Schema:  enabled

Local User Accounts: enabled

Directory Server Address: 10.10.10.11

Directory Server LDAP Port: 636

Directory User Context 1: ou=People,ou=users,dc=domain,dc=com

Security Group Distinguished Name: cn=systems,ou=Groups,dc=domain,dc=com

LDAP server has objecClass "user" and memberOf attribute for the user:

ldapsearch -x cn=testuser objectClass=user memberof -LLL
dn: cn=testuser,ou=People,ou=users,dc=domain,dc=com
memberof: cn=systems,ou=Groups,dc=domain,dc=com

Would anyone know why iLO let's me in when i enter wrong password?

Thanks.

[rmakogon]

huh, this is peculiar... iLO 3 doesn't let me in with the wrong password!

Looks like this is a bug in iLO 2.

Could someone test iLO 2 LDAP authentication with incorrect password?