Problem configuring ilo AD Integration on ESX 5.5 using HPONCFG with iLo4 firmware above 1.51

[Bob Curnock]

As part of our automated ESX 5.5 build we run HPONCFG 4.4 with an XML to configure AD Integration on ilo4. This has previously worked fine with firmware 1.51. 

<RIBCL VERSION="2.1">
<LOGIN USER_LOGIN="Administrator" PASSWORD="xxxxxx">
<DIR_INFO MODE="write">
<MOD_DIR_CONFIG>
    <DIR_AUTHENTICATION_ENABLED VALUE="Y"/>
    <DIR_LOCAL_USER_ACCT VALUE="Y"/>
    <DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>
    <DIR_SERVER_PORT VALUE= "636"/>
    <DIR_USER_CONTEXT_1 VALUE= "OU=Privileged User Accounts,OU=SpecAcct,DC=contoso,DC=microsoft,DC=com"/>
    <DIR_USER_CONTEXT_2 VALUE= " "/>
    <DIR_USER_CONTEXT_3 VALUE= " "/>
    <DIR_ENABLE_GRP_ACCT VALUE="Y"/>
    <DIR_GRPACCT1_NAME VALUE= "CN=ilo users,CN=Users,DC=contoso,DC=Microsoft,DC=com"/>
    <DIR_GRPACCT1_PRIV VALUE= "1,2,3,4,5"/>
    <DIR_GRPACCT2_NAME VALUE= "a"/>
    <DIR_GRPACCT2_PRIV VALUE= "2"/>
    <DIR_GRPACCT3_NAME VALUE= "b"/>
    <DIR_GRPACCT3_PRIV VALUE= "2"/>
</MOD_DIR_CONFIG>
</DIR_INFO>
</LOGIN>
</RIBCL>

The Latest DL380 Gen8's have been delivered with Firmware 2.05 and the XML script now fails at

   <DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>

</-- ERROR :      STATUS= 0x0001

     MESSAGE= Directory server address is not a valid domain name or IP address. -->

(I have replaced our IP and Domain details with ramdom ones)

If we downgrade firmware to 1.51 it works. I have checked the latest "HP ESXi Utilities Offline bundle for VMware vSphere 5.5" and 4.4 is the latest available version of HPONCFG.

Any ideas?

[Cederberg]

Hi.

Have you tried entering a singel IP address as DIR_SERVER_ADDRESS VALUE?  i'm thinking maybe they have added som kind of verification and the comma or the lenght is triggering it. Just a guess.

Regards

//Cederberg

[Bob Curnock]

When I run a GET_DIR_CONFIG XML via HPONCFG (after manually updating IP's via the GUI) I get

!-- HPONCFG VERSION = "4.4-0.0" -->

<!-- Generated 6/30/2015 10:49:46 -->

<RIBCL VERSION="2.1">

<LOGIN USER_LOGIN="Administrator" PASSWORD="password">

<DIR_INFO MODE="write">

<MOD_DIR_CONFIG>

<DIR_AUTHENTICATION_ENABLED VALUE = "Y"/>

<DIR_LOCAL_USER_ACCT VALUE = "Y"/>

<DIR_SERVER_ADDRESS VALUE = "192.168.0.1,192.168.0.2"/>

<DIR_SERVER_PORT VALUE = "636"/>

<DIR_OBJECT_DN VALUE = ""/>

<DIR_OBJECT_PASSWORD VALUE = ""/>

<DIR_USER_CONTEXT_1 VALUE = "OU=Privileged User Accounts,OU=SpecAcct,DC=Contoso,DC=microsoft,DC=com"/>

<DIR_USER_CONTEXT_2 VALUE = ""/>

<DIR_USER_CONTEXT_3 VALUE = ""/>

</MOD_DIR_CONFIG>

</DIR_INFO>

so it can understand there are 2 addresses - but feeding that back in as an XML file it still fails on the address.