The GET_USER command returns local user information, excluding the password. The USER_LOGIN parameter must exist in the current user database. For this command to parse correctly, the command must appear within a USER_INFO command block, and USER_INFO MODE can be in read or write. The user must have the Administer User Accounts privilege to retrieve other user accounts. Otherwise, the user can only view their individual account information.
For example:
<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="adminname" PASSWORD="password"> <USER_INFO MODE="read"> <GET_USER USER_LOGIN="username"/> </USER_INFO> </LOGIN> </RIBCL>
GET_USER parameter
USER_LOGIN is the login name of the user account. This parameter is case sensitive and must not be blank.
GET_USER runtime errors
Possible GET_USER error messages include:
• User login name must not be blank.
• User login name was not found.
• User does not have correct privilege for action. ADMIN_PRIV required.
GET_USER return messages
A possible GET_USER return message includes:
<RESPONSE STATUS="0x0000" MSG="No Errors"/>
<GET_USER USER_NAME="Admin User" USER_LOGIN= "username" ADMIN_PRIV="N"
REMOTE_CONS_PRIV="Y" RESET_SERVER_PRIV="N" VIRTUAL_MEDIA_PRIV="N"
MOD_USER
The MOD_USER command is used to modify an existing local user account. The USER_LOGIN parameter must exist in the current user database. For this command to parse correctly, the command must appear within a USER_INFO command block, and USER_INFO MODE must be set to write. The user must have the Administer User Accounts privilege. Otherwise, the user can only modify their individual account password.
To see a video demonstration of using the MOD_USER command to change a user password, see How to use HP iLO's XML scripting interface, RIBCL, to change an user password. athttp:// www.hp.com/go/ilo/videos.
For example:
<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="adminname" PASSWORD="password"> <USER_INFO MODE="write"> <MOD_USER USER_LOGIN="username"> <USER_NAME value="displayname"/> <USER_LOGIN value="newusername"/> <PASSWORD value="newpassword"/> <ADMIN_PRIV value="Yes"/> <REMOTE_CONS_PRIV value="No"/> <RESET_SERVER_PRIV value="Yes"/> <VIRTUAL_MEDIA_PRIV value="Yes"/> <CONFIG_ILO_PRIV value="Yes"/> </MOD_USER> </USER_INFO> </LOGIN> </RIBCL>
Reset administrator password example:
<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="adminname" PASSWORD="password"> <USER_INFO MODE="write"> <MOD_USER USER_LOGIN="Administrator"> <PASSWORD value="password"/> </MOD_USER> </USER_INFO> </LOGIN> </RIBCL>
Change password example:
<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="adminname" PASSWORD="password"> <USER_INFO MODE="write"> <MOD_USER USER_LOGIN="username"> <PASSWORD value="newpassword"/> </MOD_USER> </USER_INFO> </LOGIN> </RIBCL>
MOD_USER parameters
If the following parameters are not specified, then the parameter value for the specified user is preserved.
MOD_USER USER_LOGIN is the login name of the user to be changed. This parameter can be a combination of any printable characters up to a maximum length of 39 characters. This parameter is not case sensitive and must not be left blank.
USER_NAME is the actual name of the user to be modified. This parameter is not case sensitive, can be any valid string, and has a maximum length of 39 characters. This string is used for display only and must not be left blank.
PASSWORD is the password associated with the user. This parameter is case sensitive and can be a combination of any printable characters. The length is user defined and can be a minimum of zero characters and a maximum of 39 characters. The minimum length is defined in the iLO Global Settings and has a default value of eight characters.
ADMIN_PRIV is a Boolean parameter that enables the user to administer user accounts. The user can modify their account settings, modify other user account settings, add users, and delete users. Omitting this parameter prevents the user from adding, deleting, or configuring user accounts. REMOTE_CONS_PRIV is a Boolean parameter that gives permission for the user to access the Remote Console functionality. This parameter is optional, and the Boolean string must be set to
Yesif the user is allowed this privilege. If this parameter is used, the Boolean string value must
not be left blank. Omitting this parameter denies the user access to Remote Console functionality. RESET_SERVER_PRIV is a Boolean parameter that gives the user permission to remotely manipulate the server power setting. This parameter is optional, and the Boolean string must be set toYesif
the user is allowed this privilege. If this parameter is used, the Boolean string value must not be left blank. Omitting this parameter prevents the user from manipulating the server power settings. VIRTUAL_MEDIA_PRIV is a Boolean parameter that gives the user permission to access the virtual media functionality. This parameter is optional, and the Boolean string must be set toYesif the user is allowed this privilege. If this parameter is used, the Boolean string value must not be left blank. Omitting this parameter denies the user The Virtual Media privilege.
CONFIG_ILO_PRIV is a Boolean parameter that enables the user to configure iLO settings. This privilege includes network settings, global settings, Insight Manager settings, and SNMP settings. This parameter is optional, and the Boolean string must be set toYesif the user is allowed this privilege. If this parameter is used, the Boolean string value must not be left blank. Omitting this parameter prevents the user from manipulating the current iLO configuration.