method to upload certificate for directory authentication

[flaviotorres]

Hi,

I was wondering if there's a method to upload certificates for directory authentication (AD)?

[pbulteel]

I'm currently modifying the hpilo_ca to hpilo_msca. It will do everything the hpilo_ca one does, but when it comes to sign the request, it will use an MS CA. I've got most of it working. I have a few bits to fix and then cleanup the code, add some comments, etc. I'm using the Certsrv python module (github.com/magnuswatn/certsrv) for this integration. I'll have it in my repo and will send a pull request to have it included.

[flaviotorres]

That's awesome, I can run a few tests when it is available.

[pbulteel]

Hi, it's currently in my git repo under examples/ca/ - requires the certsrv python module listed above and you can add the following under the [ca]:

server = your-msca.example.com
ca_login = mscaUser
ca_password = M$caPass

Then you can do ./hpilo_msca -l ilouser -p ilopassword sign ilo-fqdn.example.com

Or ./hpilo_msca -s msca.example.com -L mscaUser -A M$caPass -l ilouser -p ilopassword sign ilo-fqdn.example.com

It's not perfect, but I wanted you to get a chance to test, etc and I'll see if I can fix any issues. Currently, the one thing I have a problem with is more of an ILO2 issue than anything.

-P