hi,
I followed your recommendation, and downloaded the Hardware Management Pack
from Oracle, and installed the included "ipmitool" package (which happens to
overwrite /usr/sbin/ipmitool).
I can now indeed pass the "-L" option to the program, but I still get the same
problem :
$ /usr/sbin/ipmitool -V
ipmitool version 1.8.10.4
$ /usr/sbin/ipmitool -H 192.168.1.NN -I lan -U OEM -P $mypwd -L OEM sunoem fan
speed 90
Activate Session error: Requested privilege level exceeds limit
Error: Unable to establish LAN session
Sun OEM Set Fan Mode command failed
$ /usr/sbin/ipmitool -H 192.168.1.NN -vv -I lan -U OEM -P $mypwd -L OEM sunoem
fan speed 90
ipmi_lan_send_cmd:opened=[0], open=[134773420]
Sending IPMI/RMCP presence ping packet
Received IPMI/RMCP response packet:
IPMI Supported
ASF Version 1.0
RMCP Version 1.0
RMCP Sequence 255
IANA Enterprise 4542
ipmi_lan_send_cmd:opened=[1], open=[134773420]
Channel 02 Authentication Capabilities:
Privilege Level : OEM
Auth Types : MD5 PASSWORD
Per-msg auth : enabled
User level auth : enabled
Non-null users : enabled
Null users : enabled
Anonymous login : disabled
Proceeding with AuthType MD5
ipmi_lan_send_cmd:opened=[1], open=[134773420]
Opening Session
Session ID : 319d4026
Challenge : e656b71c912de158f14b85567830c018
Privilege Level : OEM
Auth Type : MD5
ipmi_lan_send_cmd:opened=[1], open=[134773420]
Activate Session error: Requested privilege level exceeds limit
Error: Unable to establish LAN session
Failed to open LAN interface
Sun OEM Set Fan Mode command failed
Citeren Zdenek Styblik <zdenek.styb...@gmail.com>:
> Hello Rob,
>
> yes, there is ipmitool version from Oracle(Sun) which has this
> feature. It is bundled with Hardware
> Management Pack, this I'm sure of. I don't know if can be downloaded
> separately.
> You can find it at
> http://www.oracle.com/technetwork/server-storage/servermgmt/tech/hardware-management-pack/index.html
>
> If you find any issues with ipmitool from HMP, I beg of you, come back
> to Oracle and report it.
> Or even here, although this version is 1.8.10.x.
>
> FYI 'sunoem fan' doesn't work with new servers and works only with
> some servers. It is considered to
> be deprecated/not supported anymore.
>
> Best regards,
> Z.
>
>
> On Tue, Nov 8, 2011 at 10:44 PM, Rob De Langhe
> <rob.de.lan...@twistfare.be> wrote:
>> hi Holger,
>>
>> thanks for your reply ! I tried the option "-L", but the program does not
>> support it :
>>
>> ./ipmitool -H 192.168.1.NN -vv -I lan -U OEM -L OEM sunoem fan speed 90
>> ipmitool: illegal option -- L
>> ipmitool version 1.8.11
>>
>> usage: ipmitool [options...] <command>
>>
>> -h This help
>> -V Show version information
>> -v Verbose (can use multiple times)
>> -c Display output in comma separated format
>> -d N Specify a /dev/ipmiN device to use (default=0)
>> -I intf Interface to use
>> -H hostname Remote host name for LAN interface
>> -p port Remote RMCP port [default=623]
>> -U username Remote session username
>> -f file Read remote session password from file
>> -S sdr Use local file for remote SDR cache
>>
>> It is the "ipmitool" that I got from SourceForge, version (as you can see in
>> its reply) 1.8.11
>>
>> Is there some other version that supports this option "-L" ?
>>
>> rgds
>>
>> Rob
>>
>> Citeren "Liebig, Holger" <holger.lie...@ts.fujitsu.com>:
>>
>> Rob,
>>
>> there is a difference between a user's maximum privilege and the maximum
>> session privilege which is requested during initial session handshake.
>> Ipmitool defaults to a session privilege of administrator. Please try again
>> with the OEM user and add ?L OEM.
>>
>> Holger
>>
>> From: Rob De Langhe [mailto:rob.de.lan...@twistfare.be]
>> Sent: Monday, November 07, 2011 8:41 PM
>> To: ipmitool-devel@lists.sourceforge.net
>> Subject: [Ipmitool-devel] authorization problems with SUN smdc card
>>
>> hi all,
>>
>> this is my first post here, so I hope that I respect this mailing list's
>> policies...
>>
>> I got a SUN X2100 server with the optional SMDC card, and managed to get it
>> to work : that is, I had to boot off the X2100 Supplementary CD, and
>> configure the card's IP settings and passwords for the 4 default accounts
>> (blank, operator, admin and oem).
>>
>> Now I can access the card via the Solaris-bundled "/usr/sbin/ipmitool", as
>> well as via the SourceForge "ipmitool". All this on Solaris-10, and using
>> the "lan" interface, not the "bmc" interface.
>>
>> The main reasons for the SMDC card are:
>> - providing me a remote console access to the server : this is fine, works
>> correctly via the "ipmitool"
>> - being able to adjust the fan speeds, a topic that has been widely
>> discussed on the web by a vast amount of (deaf, by now) X2100 owners
>> complaining about extreme fan speed/noise. This still doesn't work for me.
>>
>> The settings of the fan speed, by lack of any documentation, seems to be
>> done via some "ipmitool" command that sets some percentage :
>> /usr/sbin/ipmitool -H 192.168.1.NN -I lan -U OEM sunoem fan speed 90
>> Password:
>> Sun OEM Set Fan Speed command failed: Insufficient privilege level
>>
>> Curious, since this "OEM" account has got the highest privilege level for
>> such commands:
>>
>> % ipmitool -H 192.168.1.NN -I lan -U Admin user list 2
>> Password:
>> ID Name Callin Link Auth IPMI Msg Channel Priv Limit
>> 1 true true true USER
>> 2 Operator true true true OPERATOR
>> 3 Admin true true true ADMINISTRATOR
>> 4 OEM true true true OEM
>> (the last argument "2" to "ipmitool" is the so-called channel number; the
>> output is the same for channels 0 and 1)
>>
>> However, when I ask more verbose output from the command, I see that it
>> doesn't use the "OEM" user, but instead the "Administrator" user, which
>> obviously hasn't the right privileges to make such fan adjustments:
>>
>> % ipmitool -H 192.168.1.NN -vv -I lan -U OEM sunoem fan speed 90
>> Password:
>> ipmi_lan_send_cmd:opened=[0], open=[134824980]
>> IPMI LAN host 192.168.1.NN port 623
>> Sending IPMI/RMCP presence ping packet
>> Received IPMI/RMCP response packet:
>> IPMI Supported
>> ASF Version 1.0
>> RMCP Version 1.0
>> RMCP Sequence 255
>> IANA Enterprise 4542
>>
>> ipmi_lan_send_cmd:opened=[1], open=[134824980]
>> Channel 02 Authentication Capabilities:
>> Privilege Level : ADMINISTRATOR
>> Auth Types : MD5 PASSWORD
>> Per-msg auth : enabled
>> User level auth : enabled
>> Non-null users : enabled
>> Null users : enabled
>> Anonymous login : disabled
>>
>> Proceeding with AuthType MD5
>> ipmi_lan_send_cmd:opened=[1], open=[134824980]
>> Opening Session
>> Session ID : 392b5cca
>> Challenge : .................................
>> Privilege Level : ADMINISTRATOR
>> Auth Type : MD5
>> ipmi_lan_send_cmd:opened=[1], open=[134824980]
>>
>> Session Activated
>> Auth Type : MD5
>> Max Priv Level : ADMINISTRATOR
>> Session ID : 392b5cca
>> Inbound Seq : 00000001
>>
>> ipmi_lan_send_cmd:opened=[1], open=[134824980]
>> Set Session Privilege Level to ADMINISTRATOR
>>
>> opened=[1], open=[134824980]
>> Sun OEM Set Fan Speed command failed: Insufficient privilege level
>> ipmi_lan_send_cmd:opened=[1], open=[134824980]
>> Closed Session 392b5cca
>>
>> Do you notice the
>> Privilege Level : ADMINISTRATOR
>> line, instead of OEM ?
>>
>> ==> Has anyone any clue about why this might refuse to consider the OEM user
>> ?
>>
>> many thanks in advance for any hints or tips
>>
>> Rob
>>
>>
>>
>> ----------------------------------------------------------------
>> This message was sent using IMP, the Internet Messaging Program.
>>
>> ----------------------------------------------------------------
>> This message was sent using IMP, the Internet Messaging Program.
>>
>> ------------------------------------------------------------------------------
>> RSA(R) Conference 2012
>> Save $700 by Nov 18
>> Register now
>> http://p.sf.net/sfu/rsa-sfdev2dev1
>> _______________________________________________
>> Ipmitool-devel mailing list
>> Ipmitool-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/ipmitool-devel
>>
>>
>
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure
contains a definitive record of customers, application performance,
security threats, fraudulent activity, and more. Splunk takes this
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Ipmitool-devel mailing list
Ipmitool-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipmitool-devel
