On the management node, if you install perl-Crypt-Rijndael and perl-Crypt-CBC, it will adapt to cipher suite 2 not being available. It will also start encrypting all traffic to and from the IMM.
From: "Viviano, Brad" <[email protected]> To: xCAT Users Mailing list <[email protected]> Date: 04/18/2014 08:37 AM Subject: Re: [xcat-user] iDataplex dx360M3 nodes, "r" commands failing after IMM firmware update. Here is the requested output, I compared it to the output from a node still running the older firmware on my RHEL 5.4 system that hasn't been moved yet, it looks the same. # /opt/xcat/bin/ipmitool-xcat -H c5u3-bmc -U USERID -P REMOVED lan print 1 Set in Progress : Set Complete Auth Type Support : NONE MD2 MD5 PASSWORD Auth Type Enable : Callback : : User : MD2 MD5 PASSWORD : Operator : MD2 MD5 PASSWORD : Admin : MD5 : OEM : IP Address Source : Static Address IP Address : 172.29.106.3 Subnet Mask : 255.255.0.0 MAC Address : 5c:f3:fc:a8:d0:af SNMP Community String : public IP Header : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10 BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled Gratituous ARP Intrvl : 2.0 seconds Default Gateway IP : 0.0.0.0 Default Gateway MAC : 00:00:00:00:00:00 Backup Gateway IP : 0.0.0.0 Backup Gateway MAC : 00:00:00:00:00:00 802.1q VLAN ID : Disabled 802.1q VLAN Priority : 0 RMCP+ Cipher Suites : 1,2,3,4 Cipher Suite Priv Max : XXaaXXXXXXXXXXX : X=Cipher Suite Unused : c=CALLBACK : u=USER : o=OPERATOR : a=ADMIN : O=OEM =================================================== Brad Viviano High Performance Computing & Scientific Visualization Lockheed Martin, Supporting the EPA Research Triangle Park, NC 919-541-2696 HSCSS Task Order Lead - Ravi Nair 919-541-5467 - [email protected] High Performance Computing Subtask Lead - Durward Jones 919-541-5043 - [email protected] Environmental Modeling and Visualization Lead - Heidi Paulsen 919-541-1834 - [email protected] From: Jarrod B Johnson <[email protected]> Sent: Friday, April 18, 2014 8:27 AM To: xCAT Users Mailing list Subject: Re: [xcat-user] iDataplex dx360M3 nodes, "r" commands failing after IMM firmware update. Can you do an ipmitool lan print 1 on the system? Inactive hide details for "Viviano, Brad" ---04/18/2014 08:05:47 AM---All, I have a rack of IBM iDataplex dx360M3 nodes tha"Viviano, Brad" ---04/18/2014 08:05:47 AM---All, I have a rack of IBM iDataplex dx360M3 nodes that we just transitioned from RHEL 5.4 to 6.4 From: "Viviano, Brad" <[email protected]> To: "[email protected]" <[email protected]> Date: 04/18/2014 08:05 AM Subject: [xcat-user] iDataplex dx360M3 nodes, "r" commands failing after IMM firmware update. All, I have a rack of IBM iDataplex dx360M3 nodes that we just transitioned from RHEL 5.4 to 6.4. During that process I used BOMC to update the firmware on the IMM from 1.30 to 1.41. After the firmware update, none of the "r" commands work in xCAT for my M3 nodes: # rinv c5u3 vpd c5u3: Error: No cipher suite match with proposed security algorithms c5u3: Error: No cipher suite match with proposed security algorithms c5u3: Error: No cipher suite match with proposed security algorithms c5u3: Error: No cipher suite match with proposed security algorithms c5u3: Error: No cipher suite match with proposed security algorithms c5u3: Error: timeout But work fine for my M4 nodes: # rinv c6u3 vpd c6u3: System Description: iDataPlex dx360 M4 c6u3: System Model/MTM: 7912AC1 c6u3: System Serial Number: c6u3: Chassis Serial Number: c6u3: Device ID: 32 c6u3: Manufacturer ID: IBM (20301) c6u3: BMC Firmware: 3.36 (1AOO48Q 2013/10/07 12:05:38) c6u3: Product ID: 353 I've confirmed the ipmitool-xcat bundled tool works fine: # /opt/xcat/bin/ipmitool-xcat -H c5u32-bmc -U USERID -P REMOVED chassis status System Power : on Power Overload : false Power Interlock : inactive Main Power Fault : false Power Control Fault : false Power Restore Policy : previous Last Power Event : Chassis Intrusion : inactive Front-Panel Lockout : inactive Drive Fault : false Cooling/Fan Fault : false Any idea what could be wrong? Thanks, -Brad Viviano =================================================== Brad Viviano High Performance Computing & Scientific Visualization Lockheed Martin, Supporting the EPA Research Triangle Park, NC 919-541-2696 HSCSS Task Order Lead - Ravi Nair 919-541-5467 - [email protected] High Performance Computing Subtask Lead - Durward Jones 919-541-5043 - [email protected] Environmental Modeling and Visualization Lead - Heidi Paulsen 919-541-1834 - [email protected] ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech_______________________________________________ xCAT-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xcat-user ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech_______________________________________________ xCAT-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xcat-user
<<inline: graycol.gif>>
------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech
_______________________________________________ xCAT-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xcat-user
