ILO2 - Windows AD User Name

HP ProLiant、BladeSystem、Integrity、Integrity NonStop、9000、Alpha服务器等

版主: xyevolve

版面规则
1. 本版是定位于惠普服务器的技术讨论区。
2. 本版鼓励发帖共同讨论技术问题,不鼓励站内信件私下交流,独知知不如众知知。
3. 本版允许转贴或引用他人的作品,但必须声明原作者信息。
4. 本版禁止发表出售、求购、或其他非技术讨论等帖子。
5. 本版禁止灌水,包括但不限于任何与所讨论主题无关的回复,无意义字符,直接复制其他回复等。
6. 本站附件禁止用于商业目的,请在下载后24小时内删除,本站不对其造成的结果负任何责任。
回复
SYSTEM
网站编辑
帖子: 265
注册时间: 2012年 2月 20日 15:45 星期一

ILO2 - Windows AD User Name

帖子 SYSTEM » 2014年 5月 3日 23:12 星期六

========Posted by Patrick========

All, I’m trying to configure the ILO to use Windows AD. I was able to successfully configure ILO-4 (Gen8). I use my AD Login (UserID) as “domainname\myuser”.

However, for ILO-2, I can’t use the same login. I found this link that indicates that you must use the “Full Name” instead of the UserID.
1.Authenticate users using their full user name and NOT UserID : For example, if the User name is John Smith and his User ID within Active Directory is jsmith, user cannot be authenticated in iLO2 using either test\jsmith, or jsmith, or jsmith@test.com. User must use his Login name for iLO2 as John Smith and password as his AD Domain password in order to get authenticated.

http://h20566.www2.hp.com/portal/site/h ... .199480143

There is no date on that document.
Is this still true for ILO2 with the latest ILO Firmware?

SYSTEM
网站编辑
帖子: 265
注册时间: 2012年 2月 20日 15:45 星期一

Re: ILO2 - Windows AD User Name

帖子 SYSTEM » 2014年 5月 3日 23:17 星期六

========Posted by Diego========

In iLO2, for logging as "DOMAIN\Username" or "username@domain.com", you must use an ActiveX that iLO2 loads, therefore in IE only.
You have to make sure that IE is configured to prompt to load ActiveX controls.
The ActiveX control is incharged of doing translations from "DOMAIN\Username" to user's DN

This is not needed in iLO3 and iLO4 due to the way that they query this data.
As always, advisable to use the latest iLO2 firmware.

SYSTEM
网站编辑
帖子: 265
注册时间: 2012年 2月 20日 15:45 星期一

Re: ILO2 - Windows AD User Name

帖子 SYSTEM » 2014年 5月 3日 23:18 星期六

========Posted by Patrick========

Diego, I got it to work now. Thanks a lot. Here’s what I had to do to be successful:

• When prompt for the ActiveX, install it
• Change the Security Settings for the Local Intranet
• Add the ILO Domain Site (https://*.ilo.mycompany.com)
• Change within the custom level setting
• Enabled “Initialize and Script ActiveX Control not marked as safe…”

Also, using the “Testing” button within the ILO Web Administrator doesn’t work when you try to use the USERID. The only way to test it is to logout of ILO and try from the logon page.

SYSTEM
网站编辑
帖子: 265
注册时间: 2012年 2月 20日 15:45 星期一

Re: ILO2 - Windows AD User Name

帖子 SYSTEM » 2014年 5月 3日 23:19 星期六

========Posted by Diego========

Yes, because the ActiveX control only gets activated in the Login screen.

回复