Re: [Ipmitool-devel] RE: Failed to activate a IPMI session

[Duncan L. <du...@ic...>]

On Thu, 19 Aug 2004, Duncan Laurie wrote:
> On Wed, 2004-08-18 at 15:00 -0700, Itzik Ziv wrote:
> > Hi All,
> > 
> >  
> > 
> > I am trying to run this simple ipmi command:
> > 
> > ?ipmitool -v -I lan -H 10.0.0.124 -U admin -P admin -v chassis status?
> > 
> > and it failed to establish a session. This is the output: 
> > 
> > ?Activate Session error: Requested privilege level exceeds limit?
> > 
> > ?Error: Unable to establish LAN session?
> > 
> 
> This is an odd response to get.  Can I get you to try the 1.6.0 snapshot
> I put up at http://ipmitool.sourceforge.net/snapshot ?  There has been
> some reworking of the code in this area and I want to make it wasn't a
> side effect of a different bug.
> 

I was incorrect here, this could be a perfectly normal response.
The Get Authentication Capabilities command will return the maximum
supported privilege level of the channel, not the user.  So if the
admin user is not configured with high enough privilege level on
that channel it will not connect.

You will still need to get the 1.6.0 snapshot above, but this time
you want to use the "user" command with channel 2 to list the users:

ipmitool -I open user list 2

And then the "channel" command with the admin userid to configure
the privilege level for the channel: (example assumes admin is ID 1)

ipmitool -I open channel setaccess 2 1 privilege=4

-duncan