From: Zdenek S. <zde...@gm...> - 2011-11-22 09:39:49
|
Hello, On Wed, Nov 16, 2011 at 11:07 PM, Rob De Langhe <rob...@tw...> wrote: > hi, > > I followed your recommendation, and downloaded the Hardware Management Pack > from Oracle, and installed the included "ipmitool" package (which happens to > overwrite /usr/sbin/ipmitool). What do you mean by ``which happens to > overwrite /usr/sbin/ipmitool''? Yes, you have to remove package which provides ipmitool prior to HMP installation. But it shouldn't "overwrite" anything. Could you, please, give me more information regarding this issue, if there is one? I'm also sorry for a misleading you a bit. I found out couple minutes later that ipmitool-cvs has '-L' as well. > I can now indeed pass the "-L" option to the program, but I still get the > same problem : > > $ /usr/sbin/ipmitool -V > ipmitool version 1.8.10.4 > > $ /usr/sbin/ipmitool -H 192.168.1.NN -I lan -U OEM -P $mypwd -L OEM sunoem > fan speed 90 > Activate Session error: Requested privilege level exceeds limit > Error: Unable to establish LAN session > Sun OEM Set Fan Mode command failed > Hmm. Sadly, we have only one Sun Fire X2100 in our Lab and I can't mess around with it. I've asked my colleague and he told me X2100 had some special xLOM. Anyway, could you please point me to web page(s) where you've found out it is successfully possible to regulate fan speed via % ipmitool sunoem fan ; subcommand? Because I can't find any. And to repeat what I've already said, % ipmitool sunoem fan; works only with narrow range of servers and doesn't work anymore. I'm sorry for not being of much help here. Best regards, Zdenek > $ /usr/sbin/ipmitool -H 192.168.1.NN -vv -I lan -U OEM -P $mypwd -L OEM > sunoem fan speed 90 > ipmi_lan_send_cmd:opened=[0], open=[134773420] > Sending IPMI/RMCP presence ping packet > Received IPMI/RMCP response packet: > IPMI Supported > ASF Version 1.0 > RMCP Version 1.0 > RMCP Sequence 255 > IANA Enterprise 4542 > > ipmi_lan_send_cmd:opened=[1], open=[134773420] > Channel 02 Authentication Capabilities: > Privilege Level : OEM > Auth Types : MD5 PASSWORD > Per-msg auth : enabled > User level auth : enabled > Non-null users : enabled > Null users : enabled > Anonymous login : disabled > > Proceeding with AuthType MD5 > ipmi_lan_send_cmd:opened=[1], open=[134773420] > Opening Session > Session ID : 319d4026 > Challenge : e656b71c912de158f14b85567830c018 > Privilege Level : OEM > Auth Type : MD5 > ipmi_lan_send_cmd:opened=[1], open=[134773420] > Activate Session error: Requested privilege level exceeds limit > Error: Unable to establish LAN session > Failed to open LAN interface > Sun OEM Set Fan Mode command failed > > Citeren Zdenek Styblik <zde...@gm...>: > >> Hello Rob, >> >> yes, there is ipmitool version from Oracle(Sun) which has this >> feature. It is bundled with Hardware >> Management Pack, this I'm sure of. I don't know if can be downloaded >> separately. >> You can find it at >> >> http://www.oracle.com/technetwork/server-storage/servermgmt/tech/hardware-management-pack/index.html >> >> If you find any issues with ipmitool from HMP, I beg of you, come back >> to Oracle and report it. >> Or even here, although this version is 1.8.10.x. >> >> FYI 'sunoem fan' doesn't work with new servers and works only with >> some servers. It is considered to >> be deprecated/not supported anymore. >> >> Best regards, >> Z. >> >> >> On Tue, Nov 8, 2011 at 10:44 PM, Rob De Langhe >> <rob...@tw...> wrote: >>> hi Holger, >>> >>> thanks for your reply ! I tried the option "-L", but the program does not >>> support it : >>> >>> ./ipmitool -H 192.168.1.NN -vv -I lan -U OEM -L OEM sunoem fan speed 90 >>> ipmitool: illegal option -- L >>> ipmitool version 1.8.11 >>> >>> usage: ipmitool [options...] <command> >>> >>> -h This help >>> -V Show version information >>> -v Verbose (can use multiple times) >>> -c Display output in comma separated format >>> -d N Specify a /dev/ipmiN device to use (default=0) >>> -I intf Interface to use >>> -H hostname Remote host name for LAN interface >>> -p port Remote RMCP port [default=623] >>> -U username Remote session username >>> -f file Read remote session password from file >>> -S sdr Use local file for remote SDR cache >>> >>> It is the "ipmitool" that I got from SourceForge, version (as you can see >>> in >>> its reply) 1.8.11 >>> >>> Is there some other version that supports this option "-L" ? >>> >>> rgds >>> >>> Rob >>> >>> Citeren "Liebig, Holger" <hol...@ts...>: >>> >>> Rob, >>> >>> there is a difference between a user's maximum privilege and the maximum >>> session privilege which is requested during initial session handshake. >>> Ipmitool defaults to a session privilege of administrator. Please try >>> again >>> with the OEM user and add ?L OEM. >>> >>> Holger >>> >>> From: Rob De Langhe [mailto:rob...@tw...] >>> Sent: Monday, November 07, 2011 8:41 PM >>> To: ipm...@li... >>> Subject: [Ipmitool-devel] authorization problems with SUN smdc card >>> >>> hi all, >>> >>> this is my first post here, so I hope that I respect this mailing list's >>> policies... >>> >>> I got a SUN X2100 server with the optional SMDC card, and managed to get >>> it >>> to work : that is, I had to boot off the X2100 Supplementary CD, and >>> configure the card's IP settings and passwords for the 4 default accounts >>> (blank, operator, admin and oem). >>> >>> Now I can access the card via the Solaris-bundled "/usr/sbin/ipmitool", >>> as >>> well as via the SourceForge "ipmitool". All this on Solaris-10, and using >>> the "lan" interface, not the "bmc" interface. >>> >>> The main reasons for the SMDC card are: >>> - providing me a remote console access to the server : this is fine, >>> works >>> correctly via the "ipmitool" >>> - being able to adjust the fan speeds, a topic that has been widely >>> discussed on the web by a vast amount of (deaf, by now) X2100 owners >>> complaining about extreme fan speed/noise. This still doesn't work for >>> me. >>> >>> The settings of the fan speed, by lack of any documentation, seems to be >>> done via some "ipmitool" command that sets some percentage : >>> /usr/sbin/ipmitool -H 192.168.1.NN -I lan -U OEM sunoem fan speed 90 >>> Password: >>> Sun OEM Set Fan Speed command failed: Insufficient privilege level >>> >>> Curious, since this "OEM" account has got the highest privilege level for >>> such commands: >>> >>> % ipmitool -H 192.168.1.NN -I lan -U Admin user list 2 >>> Password: >>> ID Name Callin Link Auth IPMI Msg Channel Priv Limit >>> 1 true true true USER >>> 2 Operator true true true OPERATOR >>> 3 Admin true true true ADMINISTRATOR >>> 4 OEM true true true OEM >>> (the last argument "2" to "ipmitool" is the so-called channel number; the >>> output is the same for channels 0 and 1) >>> >>> However, when I ask more verbose output from the command, I see that it >>> doesn't use the "OEM" user, but instead the "Administrator" user, which >>> obviously hasn't the right privileges to make such fan adjustments: >>> >>> % ipmitool -H 192.168.1.NN -vv -I lan -U OEM sunoem fan speed 90 >>> Password: >>> ipmi_lan_send_cmd:opened=[0], open=[134824980] >>> IPMI LAN host 192.168.1.NN port 623 >>> Sending IPMI/RMCP presence ping packet >>> Received IPMI/RMCP response packet: >>> IPMI Supported >>> ASF Version 1.0 >>> RMCP Version 1.0 >>> RMCP Sequence 255 >>> IANA Enterprise 4542 >>> >>> ipmi_lan_send_cmd:opened=[1], open=[134824980] >>> Channel 02 Authentication Capabilities: >>> Privilege Level : ADMINISTRATOR >>> Auth Types : MD5 PASSWORD >>> Per-msg auth : enabled >>> User level auth : enabled >>> Non-null users : enabled >>> Null users : enabled >>> Anonymous login : disabled >>> >>> Proceeding with AuthType MD5 >>> ipmi_lan_send_cmd:opened=[1], open=[134824980] >>> Opening Session >>> Session ID : 392b5cca >>> Challenge : ................................. >>> Privilege Level : ADMINISTRATOR >>> Auth Type : MD5 >>> ipmi_lan_send_cmd:opened=[1], open=[134824980] >>> >>> Session Activated >>> Auth Type : MD5 >>> Max Priv Level : ADMINISTRATOR >>> Session ID : 392b5cca >>> Inbound Seq : 00000001 >>> >>> ipmi_lan_send_cmd:opened=[1], open=[134824980] >>> Set Session Privilege Level to ADMINISTRATOR >>> >>> opened=[1], open=[134824980] >>> Sun OEM Set Fan Speed command failed: Insufficient privilege level >>> ipmi_lan_send_cmd:opened=[1], open=[134824980] >>> Closed Session 392b5cca >>> >>> Do you notice the >>> Privilege Level : ADMINISTRATOR >>> line, instead of OEM ? >>> >>> ==> Has anyone any clue about why this might refuse to consider the OEM >>> user >>> ? >>> >>> many thanks in advance for any hints or tips >>> >>> Rob >>> >>> >>> >>> ---------------------------------------------------------------- >>> This message was sent using IMP, the Internet Messaging Program. >>> >>> ---------------------------------------------------------------- >>> This message was sent using IMP, the Internet Messaging Program. >>> >>> >>> ------------------------------------------------------------------------------ >>> RSA(R) Conference 2012 >>> Save $700 by Nov 18 >>> Register now >>> http://p.sf.net/sfu/rsa-sfdev2dev1 >>> _______________________________________________ >>> Ipmitool-devel mailing list >>> Ipm...@li... >>> https://lists.sourceforge.net/lists/listinfo/ipmitool-devel >>> >>> >> > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > ------------------------------------------------------------------------------ > All the data continuously generated in your IT infrastructure > contains a definitive record of customers, application performance, > security threats, fraudulent activity, and more. Splunk takes this > data and makes sense of it. IT sense. And common sense. > http://p.sf.net/sfu/splunk-novd2d > _______________________________________________ > Ipmitool-devel mailing list > Ipm...@li... > https://lists.sourceforge.net/lists/listinfo/ipmitool-devel > > |