Print | Rate this content

Advisory: HP Integrated Lights-Out - iLO 3 and iLO 4 Login Page Stops Responding for Up To Ten Minutes During LDAP and Kerberos Login

SUPPORT COMMUNICATION - CUSTOMER ADVISORY

Document ID: c04705315

Version: 1

Advisory: HP Integrated Lights-Out - iLO 3 and iLO 4 Login Page Stops Responding for Up To Ten Minutes During LDAP and Kerberos Login
NOTICE: The information in this document, including products and software versions, is current as of the Release Date. This document is subject to change without notice.

Release Date: 2015-06-05

Last Updated: 2016-01-05


DESCRIPTION

On a ProLiant Gen8 or Gen9 series server, in order to use the HP Integrated Lights-Out (iLO) Kerberos login, Kerberos settings and DNS server settings must be configured. When an incorrect DNS server is configured or if the DNS server is unreachable, then during Kerberos login, the iLO login will stop responding for 5 to 10 minutes. After that period, the login page becomes accessible again.

Similarly, if LDAP is enabled and the LDAP server address is set in FQDN format instead of direct IP address, then the iLO login page will stop responding for up to 10 minutes when the DNS servers are unreachable during the LDAP login.

This issue does not occur when no DNS servers have been configured on iLO; however, it is also then not possible to use Fully Qualified Domain Names (FQDNs) for LDAP and Kerberos server configuration.

When this occurs, the iLO login page will look similar to the following and the login and HP Zero Sign-in buttons will be grayed out:

After up to ten minutes has passed, the following message will flash for one second and then the page will be available for login again:

In cases where an LDAP or Kerberos server address has been configured using FQDNs, iLO must contact a DNS server as part of the process to reach the LDAP or Kerberos server. When the configured DNS servers are unreachable, delays are encountered as several retry attempts are made for each possible DNS server.

SCOPE

Any ProLiant Gen8 and Gen9 servers with iLO 4 firmware version 2.20 (or earlier) or ProLiant Gen7 servers with iLO 3 firmware version 1.85 (or earlier).

RESOLUTION

A future iLO firmware release will reduce the amount of login delay that occurs.

As a workaround, ensure that the correct DNS server IPs are configured on iLO and the DNS servers are reachable during iLO Kerberos login.

For LDAP login, use a direct IP address of LDAP server instead of FQDN address. If a FQDN address is used, make sure the DNS servers are reachable during LDAP login.

This advisory will be updated when additional information becomes available.


RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively via e-mail through HP Subscriber's Choice. Sign up for Subscriber's Choice at the following URL: Proactive Updates Subscription Form

NAVIGATION TIP : For hints on navigating HP.com to locate the latest drivers, patches, and other support software downloads for ProLiant servers and Options, refer to the Navigation Tips document .

SEARCH TIP : For hints on locating similar documents on HP.com, refer to the Search Tips document .


Hardware Platforms Affected: HP ProLiant BL420c Gen8 Server Blade, HP ProLiant BL460c Gen8 Server Blade, HP ProLiant BL465c Gen8 Server Blade, HP ProLiant BL660c Gen8 Server Blade, HP ProLiant DL160 Gen8 Server, HP ProLiant DL320e Gen8 Server, HP ProLiant DL320e Gen8 v2 Server, HP ProLiant DL360e Gen8 Server, HP ProLiant DL360p Gen8 Server, HP ProLiant DL380e Gen8 Server, HP ProLiant DL380p Gen8 Server, HP ProLiant DL385p Gen8 Server, HP ProLiant DL560 Gen8 Server, HP ProLiant DL580 Gen8 Server, HP ProLiant ML310e Gen8 Server, HP ProLiant ML310e Gen8 v2 Server, HP ProLiant ML350e Gen8 Server, HP ProLiant ML350e Gen8 v2 Server, HP ProLiant ML350p Gen8 Server, HP ProLiant MicroServer Gen8, HP ProLiant SL210t Gen8 Server, HP ProLiant SL230s Gen8 Server, HP ProLiant SL250s Gen8 Server, HP ProLiant SL270s Gen8 Server, HP ProLiant SL4540 Gen8 3 Node Server, HP ProLiant WS460c Gen8 Graphics Server Blade, HP ProLiant XL220a Gen8 v2 Server, HP ProLiant XL740f Gen9 Server, HPE Integrated Lights-Out 4 (iLO 4), HPE ProLiant BL460c Gen9 Server Blade, HPE ProLiant DL120 Gen9 Server, HPE ProLiant DL160 Gen9 Server, HPE ProLiant DL180 Gen9 Server, HPE ProLiant DL360 Gen9 Server, HPE ProLiant DL380 Gen9 Server, HPE ProLiant DL580 Gen9 Server, HPE ProLiant DL60 Gen9 Server, HPE ProLiant DL80 Gen9 Server, HPE ProLiant ML110 Gen9 Server, HPE ProLiant ML150 Gen9 Server, HPE ProLiant ML350 Gen9 Server, HPE ProLiant WS460c Gen9 Graphics Server Blade, HPE ProLiant XL170r Gen9 Server, HPE ProLiant XL190r Gen9 Server, HPE ProLiant XL230a Gen9 Server, HPE ProLiant XL250a Gen9 Server, HPE ProLiant XL730f Gen9 Server, HPE ProLiant XL750f Gen9 Server
Operating Systems Affected: Not Applicable
Software Affected: Not Applicable
Support Communication Cross Reference ID: IA04705315
©Copyright 2017 Hewlett Packard Enterprise Company, L.P.
Hewlett Packard Enterprise Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HPE nor its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett Packard Enterprise Company and the names of Hewlett Packard Enterprise Company products referenced herein are trademarks of Hewlett Packard Enterprise Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.

Provide feedback

Please rate the information on this page to help us improve our content. Thank you!