ILO2 - Windows AD User Name

[SYSTEM]

========Posted by Patrick========

All, I’m trying to configure the ILO to use Windows AD. I was able to successfully configure ILO-4 (Gen8). I use my AD Login (UserID) as “domainname\myuser”.

However, for ILO-2, I can’t use the same login. I found this link that indicates that you must use the “Full Name” instead of the UserID.

1.Authenticate users using their full user name and NOT UserID : For example, if the User name is John Smith and his User ID within Active Directory is jsmith, user cannot be authenticated in iLO2 using either test\jsmith, or jsmith, or jsmith@test.com. User must use his Login name for iLO2 as John Smith and password as his AD Domain password in order to get authenticated.

http://h20566.www2.hp.com/portal/site/h ... .199480143

There is no date on that document.
Is this still true for ILO2 with the latest ILO Firmware?

[SYSTEM]

========Posted by Diego========

In iLO2, for logging as "DOMAIN\Username" or "username@domain.com", you must use an ActiveX that iLO2 loads, therefore in IE only.
You have to make sure that IE is configured to prompt to load ActiveX controls.
The ActiveX control is incharged of doing translations from "DOMAIN\Username" to user's DN

This is not needed in iLO3 and iLO4 due to the way that they query this data.
As always, advisable to use the latest iLO2 firmware.

[SYSTEM]

========Posted by Patrick========

Diego, I got it to work now. Thanks a lot. Here’s what I had to do to be successful:

• When prompt for the ActiveX, install it
• Change the Security Settings for the Local Intranet
• Add the ILO Domain Site (https://*.ilo.mycompany.com)
• Change within the custom level setting
• Enabled “Initialize and Script ActiveX Control not marked as safe…”

Also, using the “Testing” button within the ILO Web Administrator doesn’t work when you try to use the USERID. The only way to test it is to logout of ILO and try from the logon page.

[SYSTEM]

========Posted by Diego========

Yes, because the ActiveX control only gets activated in the Login screen.