topic ipmitool lan connections in ProLiant Servers (ML,DL,SL)

ipmitool lan connections

stevegszabo — Tue, 23 Nov 2010 21:51:42 GMT

I would like to run a few commands via ipmitool on Proliant DL380 G3/6/8 hardware however it seems that the port is closed:

ipmitool -U someguy -H somebox -P somepass user list
Error: Unable to establish LAN session
Get User Access command failed (channel 14, user 1)

nmap -sU somebox
PORT STATE SERVICE
161/udp open|filtered snmp

As you can see port 623/udp is closed. This port should be open to accept remote ipmi connections.

From the man pages:

-p <port>
Remote server UDP port to connect to. Default is 623.

lan — communicates with the Service Processor over an Ethernet LAN connection using UDP under IPv4;
UDP datagrams contains IPMI messages and Remote Management Control Protocol (RMCP) headers.

I'm able to connect to other boxes ( Sun hardware ) which seems to work:

ipmitool -U someguy -H sunbox -P somepass user list
ID Name             Callin Link Auth IPMI Msg   Channel Priv Limit
1                    false   false      true       USER
2   root             false   false      true       ADMINISTRATOR
3   someguy           true    false      true       ADMINISTRATOR
12 default          true    false      true       NO ACCESS

nmap -sU sunbox
PORT STATE SERVICE
161/udp open|filtered snmp
623/udp open|filtered unknown

How do I enable remote ipmi connections on HP hardware???

Thanks

Re: ipmitool lan connections

stevegszabo — Tue, 30 Nov 2010 19:15:39 GMT

Updating the ilo firmware seems to open the port:

iLOM Firmware: 2.01 08/04/2010

# nmap -sU lomaddress
161/udp open|filtered snmp
623/udp open|filtered unknown

I can remote commands:

$ ipmitool -I lanplus -U someguy -H lomaddress -P somepass user list 2
ID Name             Callin Link Auth IPMI Msg   Channel Priv Limit
1   Administrator    true    false      false      ADMINISTRATOR
2   someguy          true    false      false      ADMINISTRATOR
Get User Access command failed (channel 2, user 4): Requested sensor, data, or record not found

However I can't use the 'user set password' command:

$ ipmitool -I lanplus -U someguy -H lomaddress -P somepass user set password 2 aaabbbccc
Set User Password command failed (user 3): Request data length invalid

Re: ipmitool lan connections

stevegszabo — Mon, 06 Dec 2010 16:01:15 GMT

I've spent some time with both hardware and software support staff with HP and our Linux vendor.

According to our Linux vendor the ipmitool is running correctly the issue must be with the hardware. The HP lom does not support changing lom passwords remotely. I have come to this conclusion on my own as HP hardware support has refused to provide any support as they do not use ipmitool.

ipmitool -I lanplus -U $USER -H $HOST -P $PASS user set password $LUID
Password for user X:
Password for user X:
Set User Password command failed (user X): Request data length invalid

Why do vendors claim to conform to the IPMI standard and not provide the complete subset of ipmi commands?

In the future if possible I will purchase hardware which supports these commands as clearly HP does not.

Good work HP