11.07.2015 Views

HP Integrated Lights-Out 2 User Guide

HP Integrated Lights-Out 2 User Guide

HP Integrated Lights-Out 2 User Guide

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

d. Add users to the role. Click the Members tab, and add users using the Add button and theSelect <strong>User</strong>s dialog box. The devices and users are now associated.4. Use the <strong>Lights</strong> <strong>Out</strong> Management tab to set the rights for the role. All users and groups within a rolewill have the rights assigned to the role on all of the iLO 2 devices managed by the role. In thisexample, the users in the remoteAdmins role will be given full access to the iLO 2 functionality.Select the boxes next to each right, and then click Apply. Click OK to close the property sheet.5. Using the same procedure as in step 4, edit the properties of the remoteMonitors role, add the ribemail-serverdevice to the Managed Devices list on the <strong>HP</strong> Devices tab, and add users to theremoteMonitors role using the Members tab. Then, on the <strong>Lights</strong> <strong>Out</strong> Management tab, select the boxnext to the Login. Click Apply and OK. Members of the remoteMonitors role will be able toauthenticate and view the server status.<strong>User</strong> rights to any iLO 2 are calculated as the sum of all the rights assigned by all the roles in which theuser is a member, and in which the iLO 2 is a Managed Device. Following the preceding examples, if auser is in both the remoteAdmins and remoteMonitors roles, they will have all the rights, because theremoteAdmins role has those rights.To configure iLO 2 and associate it with a <strong>Lights</strong>-<strong>Out</strong> Management object used in this example, usesettings similar to the following on the Directory Settings screen.RIB Object DN = cn=rib-email-server,ou=RILOES,dc=testdomain,dc=localDirectory <strong>User</strong> Context 1 = cn=<strong>User</strong>s,dc=testdomain,dc=localFor example, to gain access, user Mel Moore, with the unique ID MooreM, located in the usersorganizational unit within the testdomain.local domain, who is also a member of one of theremoteAdmins or remoteMonitors roles, would be allowed to log in to the iLO 2. Mel would entertestdomain\moorem, or moorem@testdomain.local, or Mel Moore, in the Login Name field ofthe iLO 2 login screen, and use their Active Directory password in the Password field of that screen.Directory services objectsOne of the keys to directory-based management is proper virtualization of the managed devices in thedirectory service. This virtualization allows the administrator to build relationships between the manageddevice and user or groups already contained within the directory service. <strong>User</strong> management of iLO 2requires three basic objects in the directory service:• <strong>Lights</strong>-<strong>Out</strong> Management object• Role object• <strong>User</strong> objectsDirectory services 117

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!