HP Integrated Lights-Out 2 - Manual (Page 51)

Directory settings
iLO 2 connects to Microsoft Active Directory, Novell e-Directory, and other LDAP 3.0-compliant
directory services for user authentication and authorization. You can configure iLO 2 to authenticate
and authorize users using the HP schema directory integration or the schema-free directory
integration. iLO 2 only connects to directory services using SSL-secured connections to the directory
server LDAP port. The default secure LDAP port is 636. Directory services support is a licensed
feature available with the purchase of optional licenses. For more information, see
“Licensing”
(page 26) and “Directory services” (page 130) .
Locally-stored user accounts (found on the User Administration page) can be active while iLO 2
directory support is enabled. This support enables both local- and directory-based user
directory-based user accesses. Typically, an administrator can delete local user accounts (except
required accounts, such as an emergency access account) after iLO 2 is successfully configured
to access the directory service. You can also disable access to these accounts if directory support
is enabled.
Configuring directory settings
iLO 2 enables administrators to centralize user account administration using directory services.
You must have the Configure iLO 2 Settings privilege to configure and test the iLO 2 directory
services. To access Directory Settings, click Administration>Security>Directory.
iLO 2 directory settings enable you to control directory-related behavior for the iLO 2 directory
you are logged in to. These settings include:
•
Disable Directory Authentication – Enables you to activate or deactivate directory support on
this iLO 2 directory.
— If directory authentication is enabled and configured properly, users can log in using
directory credentials.
— If directory authentication is disabled, user credentials are not validated using the directory.
•
Use HP Extended Schema – Selects directory authentication and authorization using directory
objects created with HP schema. Select this option if the directory has been extended with HP
schema, and you plan to use it.
•
Use Directory Default Schema – Selects directory authentication and authorization using user
accounts in the directory. Select this option if the directory is not extended with HP schema.
Security 51