Ldap And Mp Login For Integrity Cell-Based Servers; User Accounts; Commands - HP Integrity BL870c Operation Manual

LDAP and MP Login for Integrity Cell-Based Servers

This section provides information on LDAP and MP login access rights and partition configuration
in iLO 2 for Integrity cell-based servers. System administrators can use this information to create
and assign access rights.
This section explains the following:
• User login functions when configured with different rights for different partitions
• User management and privileges required to execute commands in iLO 2
Integrity iLO 2 is an independent support processor that provides system manageability features
for a multi-partition server.
The following rules apply:
• Multiple users can simultaneously log in through the LAN port and independently manage
partitions or view the server status.
• Local or LDAP users can have rights.
• A user who has rights on multiple partitions can have the same or different rights for each
partition.
• For all operations that are not partition-specific, a user must have a specific right for all
partitions to which access is granted.
The iLO 2 supports multiple sessions that perform independent tasks and enables the following
usage models:
• A user can have multiple windows logged into iLO 2, and can perform long-term tasks such
as monitoring virtual front panels or studying event logs in some windows while
simultaneously performing short-term tasks like administering partitions from other
windows.
• A user can independently connect to different partitions and manage them simultaneously.
• A user can reset a partition from one window and monitor the boot from another window
while interacting with the console from yet another.

User Accounts

LDAP enables you to define iLO 2 user accounts in a centralized database on an LDAP server.
LDAP directory support is an iLO 2 advanced feature that enables centralized, user account
administration using directory services.

Commands

The iLO 2 commands have access levels to manage users effectively. Because iLO 2 commands
work at different combinations of these access levels, you must understand how to categorize
the commands.
The iLO 2 user interface has commands that can be classified into the following categories. Each
category requires certain access rights as shown in
Partition-specific Commands
that operate on a specified partition.
78 Configuring DHCP, DNS, LDAP, and Schema-Free LDAP
Table
These commands are partition-specific. They include commands
7-3.