Advantages And Disadvantages Of Schema-Free Directories And Hp Schema Directory - HP Integrated Lights-Out User Manual

Elimination of another username and password—You can use existing user accounts and passwords
in the directory without having to record or remember a new set of credentials for Lights-Out.
Flexibility—You can create a single role for a single user on a single iLO, or you can create a single
role for multiple users on multiple iLOs, or you can use a combinations of roles as is suitable for your
enterprise.
Compatibility—Lights-Out directory integration applies to iLO, RILOE and RILOE II products. The
integration supports the popular Active Directory and eDirectory.
Standards—Lights-Out directory support builds on top of the LDAP 2.0 standard for secure directory
access.
Advantages and disadvantages of schema-free
directories and HP schema directory
Directories enhance security, enabling you to manage access and rights from a centralized location.
Directories also enable flexible configuration. Some directory configuration practices work better with iLO
than others. Before configuring iLO for directories, you must decide whether to use the schema-free
directory or the HP schema directory integration methods. Answer the following questions to help evaluate
you directory integration requirements:
Can you apply schema extensions to your directory?
1.
No—Are you using Microsoft Active Directory?
o
—
No—Directory integration might not fit your environment. Consider deploying an evaluation
directory server to evaluate the benefits of directory integration.
—
Yes—Use group-based schema-free directory integration
Yes—Proceed to question 2.
o
Is your configuration scalable? Answer the following questions:
2.
Are you likely to changes the rights or privileges for a group of directory users?
a.
Will you regularly script iLO changes?
b.
Do you use more than five groups to control iLO privileges?
c.
No—Deploy an instance of the schema-free directory integration to evaluate whether or not this
o
directory integration method meets your policy and procedural requirements. If necessary, you
can deploy HP schema directory integration later.
Yes—Use HP schema directory integration.
o
Directory services 105