HP Integrated Lights-Out 4 - Manual (Page 254)

5. Navigate to the Administration
→Network→SNTP Settings page if you want to change the
date and time.
For Kerberos authentication to function properly, the date and time must be synchronized
between the iLO processor, the KDC, and the client workstation. Set the date and time in iLO
with the server, or obtain the date and time from the network by enabling the SNTP Settings
feature in iLO.
For more information, see “Configuring SNTP settings” (page 99) .
Using XML configuration and control scripts
The following sample scripts show how to set the iLO parameters for directories:
•
Set_Server_Name.xml shows how to set the iLO host name.
•
Mod_Schemaless_Directory.xml shows how to configure directory groups.
•
Mod_Network_Settings.xml shows how to configure SNTP settings.
•
Mod_Kerberos_Config.xml shows how to configure Kerberos-specific parameters.
NOTE: You can download sample XML scripts from http://www.hp.com/support/ilo4 . For more
information, see the HP iLO 4 Scripting and Command Line Guide.
Using the CLI, CLP, or SSH interface
To configure the iLO parameters by using the CLI, CLP, or SSH interface:
•
iLO Hostname—You can change the iLO host name in the Hostname property of the
/map1/dnsendpt1
target.
•
Directory groups—You can configure directory group names and permissions in the properties
of the /map1/oemhp_dircfg1 target. The group SIDs cannot be configured through this
interface.
•
iLO Date/Time, SNTP Settings—The current date and time and the SNTP settings cannot be
displayed through this interface.
•
Kerberos-specific configuration parameters—You can configure Kerberos parameters in the
properties of the oemhp_dircfg1, target.
NOTE: For more information about configuring the iLO parameters by using the CLI, CLP, or
SSH, see the HP iLO 4 Scripting and Command Line Guide.
Time requirement
To log in to Kerberos successfully, ensure that the date and time of the following are set to within
5 minutes of one another:
•
The iLO server
•
The client running the web browser
•
The servers performing the authentication
Configuring single sign-on
Users who are allowed to log in to iLO must be members of the groups for which permissions are
assigned. For Windows clients, locking and unlocking the workstation refreshes the credentials
that are used to log in to iLO. Home versions of the Windows operating system do not support
Kerberos login.
254 Directory services