HP Integrity BL870c Operation Manual page 9

Example: Creating and Configuring Directory Objects for Use with iLO 2 in Active Directory...186
Directory Services Objects.............................................................................................................189
Active Directory Snap-Ins........................................................................................................190
Managing HP Devices In a Role.........................................................................................190
Managing Users In a Role...................................................................................................190
Setting Login Restrictions.........................................................................................................191
Setting Time Restrictions....................................................................................................192
Defining Client IP Address or DNS Name Access.............................................................192
Setting User or Group Role Rights................................................................................................193
Directory Services for eDirectory........................................................................................................194
Installing and Initializing Snap-In for eDirectory.........................................................................194
Example: Creating and Configuring Directory Objects for Use with iLO 2 Devices in
eDirectory......................................................................................................................................195
Creating Objects.......................................................................................................................195
Creating Roles..........................................................................................................................196
Directory Services Objects for eDirectory......................................................................................198
Adding Role Managed Devices................................................................................................198
Adding Members......................................................................................................................198
Setting Role Restrictions................................................................................................................199
Setting Time Restrictions...............................................................................................................200
Defining Client IP Address or DNS Name Access...................................................................200
Setting Lights-Out Management Device Rights............................................................................200
Installing Snap-Ins and Extending Schema for eDirectory on a Linux Platform..........................201
Installing the Java Runtime Environment................................................................................201
Installing Snap-Ins....................................................................................................................202
Extending Schema....................................................................................................................202
Verifying Snap-In Installation and Schema Extension.............................................................203
Using the LDAP Command to Configure Directory Settings in iLO 2.........................................203
User Login Using Directory Services..................................................................................................204
Certificate Services..............................................................................................................................205
Installing Certificate Services........................................................................................................205
Verifying Directory Services..........................................................................................................205
Configuring an Automatic Certificate Request.............................................................................205
Directory-Enabled Remote Management...........................................................................................205
Using Existing Groups...................................................................................................................206
Using Multiple Roles.....................................................................................................................206
Creating Roles that Follow Organizational Structure...................................................................207
Restricting Roles............................................................................................................................207
Role Time Restrictions..............................................................................................................207
IP Address Range Restrictions.................................................................................................208
IP Address and Subnet Mask Restrictions...............................................................................208
DNS-Based Restrictions............................................................................................................208
Role Address Restrictions........................................................................................................208
Enforcing Directory Login Restrictions.........................................................................................208
Enforcing User Time Restrictions..................................................................................................209
User Address Restrictions.............................................................................................................210
Creating Multiple Restrictions and Roles......................................................................................210
Directory Services Schema (LDAP)....................................................................................................211
HP Management Core LDAP Object Identifier Classes and Attributes........................................211
Core Classes..............................................................................................................................211
Core Attributes.........................................................................................................................211
Core Class Definitions..............................................................................................................212
hpqTarget............................................................................................................................212
hpqRole...............................................................................................................................212
hpqPolicy.............................................................................................................................212
Table of Contents 9