Oracle^® ILOM Protocol Management Reference for SNMP and IPMI Firmware Release 3.2.x

Manage Active Directory Custom Groups

1. Log in to a host that has an SNMP tool and the Oracle ILOM MIBs installed. For example, type:

   ssh username@snmp_manager_ipaddress

   Password: password

2. To view the name of Active Directory custom group ID number 2, type:

   % snmpget SNMP_agent 
   ilomCtrlActiveDirCustomGroupName.2
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupName.2 = 
   STRING: CN=SpSuperCust,OU=Groups,DC=johns,DC=oracle,DC=com
   

3. To set the name of Active Directory custom group ID number 2 to CN=SpSuperCust,OU=Groups,DC=bills,DC=oracle,DC=com, type:

   % snmpset SNMP_agent
   ilomCtrlActiveDirCustomGroupName.2 s CN=SpSuperCust,OU=Groups,DC=
   bills,DC=oracle,DC=com
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupName.2 = 
   STRING: CN=SpSuperCust,OU=Groups,DC=bills,DC=oracle,DC=com
   % snmpget SNMP_agent
    ilomCtrlActiveDirCustomGroupName.2
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupName.2 = m
   STRING: CN=SpSuperCust,OU=Groups,DC=bills,DC=oracle,DC=co
   

4. To view the roles of Active Directory custom group ID number 2, type:

   % snmpget SNMP_agent
    ilomCtrlActiveDirCustomGroupRoles.2
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupRoles.2 = 
   STRING: "aucro"
   

5. To set the roles of Active Directory custom group ID number 2 to User Management and Read Only (u, o), type:

   % snmpset SNMP_agent
   ilomCtrlActiveDirCustomGroupRoles.2 s “uo"
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupRoles.2 = 
   STRING: "uo"
   % snmpget  SNMP_agent
   ilomCtrlActiveDirCustomGroupRole.2
   SUN-ILOM-CONTROL-MIB::ilomCtrlActiveDirCustomGroupRoles.2 = 
   STRING: "uo"
   

   The following table describes the Active Directory Custom Groups SNMP MIB objects.

   MIB Object Description Allowed Values Type Default ilomCtrlActive DirCustomGroup Id An integer identifier of the Active Directory Custom Groups entry. 1 to 5 This object is not accessible for reading or writing. Integer None ilomCtrlActive DirCustomGroup Name This string should contain a Distinguished Name that exactly matches one of the group names on the Active Directory server. Any user belonging to one of these groups in this table will be assigned the Oracle ILOM role based on the entry's configuration for roles. name (maximum of 255 characters) String None ilomCtrlActive DirCustom GroupRoles Specifies the role that a user authenticated through Active Directory should have. Setting this property to legacy roles of Administrator or Operator, or any of the individual role IDs of a, u, c, r, o, and s, will cause the Active Directory client to ignore the schema stored on the Active Directory server. Setting this object to none clears the value and indicates that the native Active Directory schema should be used. The role IDs can be joined together. For example, aucros, where a=admin, u=user, c=console, r=reset, o=read-only, and s=service. administrator, operator, admin(a), user(u), console(c), reset(r), read-only(o), service(s), none String None