|
|
|
Admin Groups
(/admingroups/1|2|3|4|5) |
A system administrator can
optionally configure Admin Group properties instead of the Role
properties in Oracle ILOM to provide user authorization.
Oracle ILOM supports the configuration of up to five Admin
Groups. When Admin Group properties are enabled in Oracle ILOM,
a user's group membership is checked for any matching groups defined
in the admin table. If a match occurs, the user is granted Administrator-level
access.
Note – Oracle
ILOM grants a group member one or more authorization levels based
on the matching groups (Operator, Administrator, or Custom) found
in each configured group table.
Use the following possible values to populate the configuration
properties for each Active Directory Admin Group in Oracle ILOM:
DN format: CN=admingroup,OU=groups,DC=domain,DC=company,DC=com NT Domain format: domain\admingroup Full Domain format: DC=domain,DC=company,DC=com\admingroup Simple Name format: admingroup
(Up to 128 characters)
CLI Configuration Syntax for Admin
Groups:
set /SP|CMM/clients/activedirectory/admingroups/n name=string
Example Syntax:
set /SP/clients/activedirectory/admingroups/1/ name=CN=spSuperAdmin,OU=Groups,DC=sales,DC=oracle,DC=com
Set 'name' to 'CN=spSuperAdmin,OU=Groups,DC=sales,DC=oracle,
DC=com' |
Operator Groups
(/operatorgroups/1|2|3|4|5) |
A system administrator can optionally
configure Operator Group properties instead of the Role properties
in Oracle ILOM to provide user authorization.
Oracle ILOM supports the configuration of up to five Operator
Groups. When Operator Group properties are enabled in Oracle ILOM,
a user's group membership is checked for any matching groups defined
in the operator table. If a match occurs, the user is granted Operator-level
access.
Note – Oracle
ILOM grants a group member one or more authorization levels based
on the matching groups (Operator, Administrator, or Custom) found
in each configured group table.
Use the following possible values to populate the configuration
properties for each Operator Group in Oracle ILOM:
DN format: CN=operatorgroup,OU=groups,DC=domain,DC=company,DC=com NT Domain format: domain\operatorgroup Full Domain format: DC=domain,DC=company,DC=com\operatorgroup Simple Name format: operatorgroup
(Up to 128 characters)
CLI Configuration Syntax for Operator
Groups:
set /SP|CMM/clients/activedirectory/operatorgroups/n name=string
Example Syntax:
set /SP/clients/activedirectory/operatorgroups/1 name=CN=spSuperOper,OU=Groups,DC=sales,DC=oracle,DC=com
Set 'name' to 'CN=spSuperOper,OU=Groups,DC=sales,DC=oracle,DC=
com'' |
Host Groups |
Active Directory Host Groups
properties are specific to Oracle's multi-domain SPARC server systems.
For multi-domain SP server systems, Oracle ILOM enables system
administrators to configure up to 10 host groups for Active Directory
user authentication.
CLI Configuration Syntax for Host
Groups:
set /SP/clients/activedirectory/hostgroups/n/ name=string hosts=string roles=string
Where:
name= is a read and
write property that represents the Active Directory group name for
the specified host group. hosts= is a read and write property that lists the
PDomain for which this host group assigns roles. roles= is a read/write property that specifies the
domain-specific privilege levels for the host group. This property
supports any of the individual host role ID combinations of a, c,
and r (for example, acr) where a= admin, c=console, and r=reset.
For further details about configuring Host Group properties
for multi-domain server SP systems, see the administration guide
available for the Oracle server. |
Custom Groups
(/customgroups/1|2|3|4|5) |
A system administrator can
optionally configure up to five Custom Group properties in Oracle
ILOM to provide user authorization. Oracle ILOM uses the Custom
Group properties to determine the appropriate user roles to assign
when authenticating users who are members of a Custom Group.
Note – Oracle
ILOM grants a group member one or more authorization levels based
on the matching groups (Operator, Administrator, or Custom) found
in each configured group table.
Use the following possible values to populate the configuration
properties for each Custom Group in Oracle ILOM:
User role: administrator |operator|advanced (a|u|c|r|o|s) DN format: CN=customgroup,OU=groups,DC=domain,DC=company,DC=com NT Domain format: domain\customgroup Full Domain format: DC=domain,DC=company,DC=com\customgroup Simple Name format: customgroup
(Up to 128 characters)
CLI Configuration Syntax for Custom
Groups:
set /SP|CMM/clients/activedirectory/customgroups/n name=string roles=administrator|operator|a|u|c|r|o|s
Example Syntax:
set /SP/clients/activedirectory/customgroups/1 name=CN=spSuperOper,OU=Groups,DC=sales,DC=oracle,DC=com roles=au
Set 'name' to 'CN=spSuperOper,OU=Groups,DC=sales,DC=oracle,DC=com''
roles' to 'au'
Related Information:
|
Save |
Web interface – To
apply changes made to properties in the Admin, Operator, or Custom Group
dialogs, you must click Save. |
|