Installing And Configuring Directory Services; Directory Services - HP ntegrity iLO 2 MP Operation Manual

7 Installing and Configuring Directory Services

You can install and configure the iLO 2 MP directory services to leverage the benefits of a single
point of administration for the iLO 2 MP user accounts.
This chapter provides information on how to install and configure iLO 2 MP directory services.
This chapter addresses the following topics:
• "Directory Services" (page 147)
• "Directory Services for Active Directory" (page 152)
• "Directory Services for eDirectory" (page 163)
• "User Login Using Directory Services" (page 172)
• "Certificate Services" (page 173)
• "Directory-Enabled Remote Management" (page 173)
• "Directory Services Schema (LDAP)" (page 179)

Directory Services

The following are benefits of directory integration:
Scalability
Security
Role-based administration
Single point of administration
Immediacy
Reuse of username and password
Flexibility
Compatibility
Standards
Leverage the directory to support thousands of users on
thousands of iLO 2s.
Robust user password policies are inherited from the
directory. User password complexity, rotation frequency,
and expiration are policy examples.
You can create roles (for instance, clerical, remote control
of the host, complete control), and associate users or user
groups with those roles. When you change a single role,
the change applies to all users and the iLO 2 MP devices
associated with that role.
You can use native administrative tools, like Microsoft
Management Console (MMC) and ConsoleOne, to
administer the iLO 2 MP users.
A single change in the directory rolls out immediately to
associated iLO 2 MPs eliminating the need to script this
process.
You can use existing user accounts and passwords in the
directory without having to record or remember a new set
of credentials for the iLO 2 MP.
You can create a single role for a single user on a single
iLO 2 MP; you can create a single role for multiple users
on multiple iLO 2 MPs; or you can use a combination of
roles to best fit your enterprise.
The iLO 2 MP directory integration applies to the iLO 2
MP products and supports the popular directories Active
Directory and eDirectory.
The iLO 2 MP directory support builds on the LDAP 2.0
standard for secure directory access.
Directory Services 147