HPE BladeSystem Management Software
Showing results for 
Search instead for 
Do you mean 

ILO3 & ILO4, fence_ipmilan(RH Cluster Suite) behaviour

Trusted Contributor

ILO3 & ILO4, fence_ipmilan(RH Cluster Suite) behaviour

Simo had an iLO question when using Red Hat OS.

 

****************

 

Previously only the user with Admin rights has been able to power down or reset the server, but RH added –L option to fence_ipmilan to allow fencing with user session privileges.

Customer installed the latest packages as per https://access.redhat.com/kb/docs/DOC-66997 -L option works now, but the user fenceagent cannot power off the server, even with “virtual power and reset” privileges has been set to it on ILO4. Has anyone else tested this? The following statement clearly explains that with leatest updates you should be able to use user privileges with fence_ipmilan.

 

****************

 

Reply from Jonathan:

 

******************

 

I believe you need to have the “operator” ipmi level, user was insufficient in my testing.

 

</>hpiLO-> show /map1/accounts1/fence 

 

status=0

status_tag=COMMAND COMPLETED

Mon Sep 10 14:41:41 2012

 

/map1/accounts1/fence

  Targets

  Properties

    username=fence

    password=********

    name=fence

    group=oemhp_rc,oemhp_power,oemhp_vm

  Verbs

    cd version exit show create delete set

 

cluster.conf:

<fencedevice agent="fence_ipmilan" ipaddr="mgmt1-ilo" lanplus="1" login="fence" name="mgmt1-ilo" passwd="************" power_wait="4" privlvl="operator"/>

 

***************

 

Any other comments or suggestions?

2 REPLIES
Highlighted
Honored Contributor Honored Contributor

Re: ILO3 & ILO4, fence_ipmilan(RH Cluster Suite) behaviour

Although redhata claims that user level is enoug, operator seems to be requirement (at least in RHEL5).

Remember to give Kudos to answers! (click the KUDOS star)

You can find me from Twitter @JKytsi
Occasional Advisor

Re: ILO3 & ILO4, fence_ipmilan(RH Cluster Suite) behaviour

I can also confirm that this is the case with ILO4 and RHEL6 ( RHEL 6.4 with latest patches)

 

You need to give the user Virtual Console, Power Reset and Virtual Media permissions at the  ILO4 level

 

also specify privlvl=operator in the fence string in the cluster.conf