Configuring Directory Services

User Access: All users.

You can define the method of storing and accessing login and password information for access to the Service Processor by configuring the following directory services options:

Users authenticated using directory services (i.e. remote users) are only given access to the Service Processor by means of a group mapping that maps the remote group to which the user belongs, to a Service Processor administrative group.

Creating the Keytab File

To use ADS as a directory service on the Service Processor, you must create an active directory account. The name service library on the Service Processor uses this account to authenticate itself to the LDAP interface of the active directory server. A Windows administrator can create the keytab for this account using the following command:

ktpass -princ <logon>@<domain> -pass <password> -mapuser <logon> -out <output filename>

SM Console Usage:

Follow these steps to configure directory services:

1. Click Access Control Directory Services from the menu bar.
2. In the Settings table, select the first radio button if you do not wish to use directory services and to use local etc/pw files. Otherwise, select the radio button for the network directory services database you wish to use: NIS or ADS.
3. Enter the domain name for the option you selected in step 4.
4. Enter the server name for the option you selected in step 4. (Separate names with commas for multiple servers.)
5. If you chose ADS, also enter the organizational unit, ADS Logon ID, and locate the keytab file.
6. Click the button to save the settings.

SM Command Usage:

You can also use the access directory services subcommands to perform this function at the command line.

Note

• The clock on the Service Processor must be accurate, and DNS must be set up (the Service Processor must have a DNS record).
• See your server documentation for details about prerequisites and requirements for using and configuring ADS with the Service Processor.

Related Topics

Creating the Initial Manager Account

Adding a New User

Logging Out

Mapping Directory Service Groups

Managing Local Users

Changing Passwords

Creating Trusted Host Relationships

Adding Public Keys