Many ILO3 bugs

[Frédéric VANNIÈRE]

I've already opened a ticket to the support but I doubt it will be transmitted to ILO3 developers.

These are the bugs I've found on ILO3 1.05 and 1.07 (factory installed).


BLOCKING : SSL Certificate error
================================

Impacted browsers : Firefox 3 and Google Chrome (Safari is OK)

The default SSL certificate is buggy. Once I've accessed a ILO3 from Firefox or Chrome, I can't access any other ILO3 with the erro :

Firefox3 : sec_error_reused_issuer_and_serial
Chrome : Erreur 2 (net::ERR_FAILED) : Unkown error


The CN depends on the server's serial number but all the public keys and serial numbers are the same for all the servers !!!




BLOCKING : no SSH access without DSA key
========================================

I've created a new user "root" and if I don't add a "Secure Shell Key" to this user I can't connect with SSH :

f.vanniere@frederic:~$ ssh root@myhpserver-ilo.local.ds
Permission denied.
Connection to myhpserver-ilo.local.ds closed by remote host.
Connection to myhpserver-ilo.local.ds closed.


Once I've added the key it works as usual :

f.vanniere@frederic:~$ ssh root@myhpserver-ilo.local.ds
User:root logged-in to myhpserver-ilo.local.ds.planet-work.net(10.3.0.190)
iLO 3 Advanced 1.05 at Jun 01 2010
Server Name: myhpserver
Server Power: On



BLOCKING : Java remote console not working on linux
===================================================

The java remote console doesn't work at all on my linux desktop :

OS : Ubuntu 9.04 x86_64
Plugin : IcedTea NPR Web Browser Plugin (using IcedTea6 1.8 (6b18-1.8-4ubuntu3))
Description : The IcedTea NPR Web Browser Plugin (using IcedTea6 1.8 (6b18-1.8-4ubuntu3)) executes Java applets.
Location : /usr/lib/jvm/java-6-openjdk/jre/lib/amd64/IcedTeaPlugin.so




BORING : Java remote console keymap is wrong on OSX
===================================================

On a Mac OSX client the console uses a wrong keymap (QUERTY instead of AZERTY) and I can't change it.




BLOCKING : disconnections from SSH shell
========================================

While on VSP from the SSH Shell, I often have disconnections :

[...]
For access via BIOS Serial Console
Press "ESC+1" to continue
Press "ESC+9" for ROM-Based Setup Utility
Press "ESC+0" for System Maintenance Menu
Press "ESC+!" for Default Boot Override Options
Press "ESC+@" for Network Boot

Write failed: Broken pipe
f.vanniere@frederic:/tmp$




BORING : serial console is fucking slow
=======================================

It's great to have colors now (ANSI) on the remote serial console but it's very slow even with the speed configured to 115200 bps on ILO3.

The video of the 12 cores color minitel : http://www.planet-work.fr/documents/12cores-minitel.mov



Power meter is not accurate (ILO2 and ILO3)
===========================================

The values from ILO3 power meter are wrong because it doesn't take into account the power supplies efficiency.

From a wattmeter I've got a 5% to 10% difference between the values from ILO and the real power consumption. ILO should calculate a more accurate value knowing the power supply and the output power.

[barnett chan]

The sec_error_reused_issuer_and_serial seems to be Firefox 3.0 related. FF 3.5 don't show this error.

I'm able to ssh into my iLO without an DSA key.

64bit java and Mac OSX are not list in the support matrix.

[Frédéric VANNIÈRE]

I've upgraded to ILO2 1.10 and the SSL certificate error has been fixed.

But I'm found a new bug !!


Remote serial console (or SSH) becomes unusable
=========================================

It's not only horribly slow, sometimes the console doesn't respond anymore. The best way to trigger this is to copy/paste some text (> 100 characters) to the console. After this, I need to reset ILO3 to get the console back.


Come on HP !! Proliant servers are not only for Windows !!!