HP Integrated Lights-Out 2 User Guide
HP Integrated Lights-Out 2 User Guide
HP Integrated Lights-Out 2 User Guide
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
For example, when <strong>User</strong>1 logs in, the Web server builds the initial frames view, with current user: <strong>User</strong>1in the top pane, menu items in the left pane, and page data in the lower-right pane. As <strong>User</strong>1 clicks fromlink to link, only the menu items and page data are updated.While <strong>User</strong>1 is logged in, if another user, <strong>User</strong>2, opens another browser window on the same client andlogs in, the second login overwrites the cookie generated in the original <strong>User</strong>1 session. Assuming that<strong>User</strong>2 is a different user account, a different current frame is built, and a new session is granted. Thesecond session is displayed in the Active Sessions section of the iLO 2 Status page as current user: <strong>User</strong>2.The second login has effectively orphaned the first session (<strong>User</strong>1) by wiping out the cookie generatedduring <strong>User</strong>1's login. This behavior is the same as closing <strong>User</strong>1's browser without clicking the Log <strong>Out</strong>link. <strong>User</strong>1’s orphaned session is reclaimed when the session timeout expires.Because the current user frame is not refreshed unless the browser is forced to refresh the entire page,<strong>User</strong>1 can continue navigating using his or her browser window. However, the browser is now operatingusing <strong>User</strong>2's session cookie settings, even though it is not readily apparent.If <strong>User</strong>1 continues to navigate in this mode (<strong>User</strong>1 and <strong>User</strong>2 sharing the same process because <strong>User</strong>2logged in and reset the session cookie), the following can occur:• <strong>User</strong>1's session behaves consistently with the privileges assigned to <strong>User</strong>2.• <strong>User</strong>1's activity keeps <strong>User</strong>2's session alive, but <strong>User</strong>1's session can time out unexpectedly.• Logging out of either window causes both window sessions to terminate. The next activity in theother window can redirect the user to the login page as if a session timeout or premature timeoutoccurred.• Clicking Log <strong>Out</strong> from the second session (<strong>User</strong>2) results in a Logging out: unknown pageto display before redirecting the user to the login page.• If <strong>User</strong>2 logs out then logs back in as <strong>User</strong>3, <strong>User</strong>1 assumes <strong>User</strong>3's session.• If <strong>User</strong>1 is at login, and <strong>User</strong>2 is logged in, <strong>User</strong>1 can alter the URL to redirect to the index page. Itappears as if <strong>User</strong>1 has accessed iLO without logging in.These behaviors continue as long as the duplicate windows are open. All activities are attributed to thesame user, using the last session cookie set.Displaying the current session cookieAfter logging in, you can force the browser to display the current session cookie by enteringjavascript:alert(document.cookie) in the URL navigation bar. The first field visible is thesession ID. If the session ID is the same among the different browser windows, then these windows aresharing the same iLO 2 session.You can force the browser to refresh and reveal your true identity by pressing the F5 key, selectingView>Refresh, or using the refresh button.Preventing cookie-related user issuesTo prevent cookie-based behavioral problems:• Start a new browser for each login by double-clicking the browser icon or shortcut.• Click the Log <strong>Out</strong> link to close the iLO 2 session before closing the browser window.Inability to access ActiveX downloadsIf your network does not allow ActiveX controls you can capture the DVC.DLL from a single system andthen distribute the file to client machines on the network.1. Log into iLO 2.2. Type https://ilo_name/dvc.cab in the browser address bar.Troubleshooting iLO 2 167