On Tue, Apr 24, 2012 at 6:52 PM, Albert Chu <ch...@llnl.gov> wrote:

> I see that the original bug was specified against the -I lan interface
> (i.e. IPMI 1.5), but the IPMI 2.0 password length max is 20.  Not sure
> if this is being accounted for in the code changes for -I lanplus.
>
> Al
>
>
Albert,

I would like to ask you for clarification in this case, because I find IPMI
specification being quite confusing. They're talking about storing
passwords as 16 byte or 20 byte and internal tag in one paragraph. Yet
talking about use of 16b and 20b passwords in other. I'm referring to pages
297-298.
As I understand it, password length is up to 16 bytes and the only
difference is storage method and latter use determined how was password
stored.

To be honest, I haven't read IPMI specification back and forth(only bits I
needed or were interesting), so it is possible it is explained somewhere in
there.

Thank you for clarification,
--Duncan


> > I'll try to post a patch for review for the 16 character username
> > limit sometime this week.
> >
> > Do you what you can with the resources you have a hand.
> > Any/All help is much appreciated.
> >
> > -- Jim Mankovich | jm...@hp.com --
> >
> > On 4/23/2012 12:22 PM, Duncan Idaho wrote:
> > >
> > > On Mon, Apr 23, 2012 at 6:26 PM, Jim Mankovich <jm...@hp.com> wrote:
> > >         [...]
> > >         report and I could not find any existing resolution to in
> > >         the TOB CVS for ipmitool.   If anyone
> > >         has any time to work on ipmitool, please look at Tracker
> > >         items first for something to do.
> > >
> > >
> > > Time, yes(sometimes). Machines to test at? No.
> > > And some stuff, well the most of it, will require some IPMI capable
> > > hardware to test and develop at. So it won't be that easy to get
> > > devs.
> > >
> > > Anyway. Once we agree on code in 'lib/ipmi_user.c', I could take a
> > > look at
> > >
> http://sourceforge.net/tracker/?func=detail&aid=3001519&group_id=95200&atid=610550and
> http://sourceforge.net/tracker/?func=detail&aid=3184687&group_id=95200&atid=610550.
>  That's where they'll go right? btw this sounds like a BMC(IPMI stack) to
> me as well and reportee should report it to his vendor.
> > >
> > > --Duncan
> > >
> --
> Albert Chu
> ch...@llnl.gov
> Computer Scientist
> High Performance Systems Division
> Lawrence Livermore National Laboratory
>
>
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Ipmitool-devel mailing list
Ipmitool-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipmitool-devel

Reply via email to