Setting Up Directory Security Groups; Login Process Using Directory Services Without Schema Extensions - HP Integrity BL870c Operation Manual

1. Follow the procedure for
8. It is not necessary to enter a new port number.
2. Set up directory security groups.

Setting Up Directory Security Groups

The following procedure describes how to set up directory security groups in schema-free LDAP
using the iLO 2 MP TUI. To use the web interface, see
NOTE: Due to command syntax changes in schema-free LDAP, some customer-developed
scripts may not run. You must change any scripts you developed to enable them to run with the
new schema-free LDAP syntax.
NOTE: You must select the default schema from the LDAP command for the schema-free LDAP
settings to work.
To set up directory security groups, follow these steps.
1. At the MP:CM> prompt, enter LDAP. The screen displays the current LDAP options.
[hqgstlb3] MP:CM> ldap
LDAP
Current LDAP options:
D - Directory settings
G - Security Group Administration
2. Enter G. The current group configuration appears.
Enter menu item or [Q] to Quit:G
Current Group Configuration:
Group Names
--------------------------------------------------------------------------
1 - Administrator
2 - User
3 - Custom1
4 - Custom2
5 - Custom3
6 - Custom4
Only the first 30 characters of the Group Distinguished Names are displayed.
Enter number to view or modify, or [Q] to Quit:
3. Enter the number for the group you want to view or modify. The current LDAP group
settings appear.
4. Set up a group distinguished name.
5. Select rights for the group.
6. Enter Y to confirm.

Login Process Using Directory Services Without Schema Extensions

You can control access to iLO 2 using directories without schema extensions. iLO 2 acquires the
user name to determine group membership from the directory. iLO 2 then cross-references the
group names with its locally stored names to determine user privilege level. iLO 2 must be
configured with the appropriate group names and their associated privileges. To configure iLO
2, use one of the following methods:
• Web GUI (Administration > Directory Settings > Group Administration page)
• iLO 2 MP TUI (LDAP command)
"Configuring LDAP Extended Schema" (page
Group Distinguished Names
"Group Accounts" (page
Access Rights
C, P, M, U
C, P
None
None
None
None
Configuring Schema-Free LDAP
74), but omit Step
140).
77