Ldap Directory Service Option - HP 1x1x16 - IP Console Switch KVM Integration Notes

LDAP directory service option

Servers running Microsoft Windows 2000 Server or Windows Server 2003 operating systems use
Microsoft Active Directory to manage all network users and resources such as computers, servers, and
printers. Active Directory is a directory service that provides authentication for network users and
manages relationships between users and resources.
The HP IP Console Switch supports a Lightweight Directory Access Protocol (LDAP) licensing option
that allows a system administrator to use the centralized management functionality of Active Directory
to manage console switches. By enabling the LDAP functionality of the switch, the system
administrator can manage switch users with the same efficiency as he or she does other network users
and resources (Figure 2).
Figure 2. Optional HP IP Console Switch administration with LDAP directory services
Remote
KVM
Console
Since Active Directory authenticates from a shared database, enabling LDAP yields the following
benefits:
• Simplified user access – A switch user can use the same ID and password for the switch that he or
she uses for the domain.
• Simplified account management – Switch users and network users are centrally managed by the
directory service on one machine. Any change is effective everywhere immediately.
• Quicker account changes – Deleting or disabling a switch user immediately removes his or her
access to all resources (including switches).
• More secure management – Password type and changes are enforced at the directory level.
The directory services option is activated by purchasing an LDAP license to obtain the LDAP key.
Once the administrator enters the LDAP key code during the switch configuration procedure, the LDAP
functionality can be enabled.
Switch A
Switch B
Switch C
Domain Controller
Server
Active Directory
Domain user
Domain user w/switch A rights
Domain user w/switch B rights
Domain user w/switch C rights
Domain user
3