- Community Home
- >
- Servers and Operating Systems
- >
- HPE ProLiant
- >
- Server Management - Remote Server Management
- >
- Re: Determining status of security override
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-08-2007 11:02 AM
тАО10-08-2007 11:02 AM
Determining status of security override
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-09-2007 03:08 AM
тАО10-09-2007 03:08 AM
Re: Determining status of security override
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-09-2007 07:23 AM
тАО10-09-2007 07:23 AM
Re: Determining status of security override
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-09-2007 07:38 AM
тАО10-09-2007 07:38 AM
Re: Determining status of security override
You could write a valid RIBCL script (just login/logout) and supply known invalid credentials; i.e. make up a "nonsense" password.
Broadcast this to all of the lights-out processors using CPQLOCFG (HP Lights-Out Configuration Utility). All of the lights-out processors that accept the script either:
1) have an account using the bogus credentials
2) have the security override switch.
I know it is not explicitly a test for the switch, but it does test for a symptom of having the switch set.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-10-2007 05:03 AM
тАО10-10-2007 05:03 AM
Re: Determining status of security override
The process would be sending a broadcast with a script to change the Password for all ilo servers.
Here comes the part that won't be that nice. You will have to wait until the next maintenance window or the next reboot for all servers, once this is done you can send another scrip trying to verify or login the iLOs if the security switch was set to on the password you sent will not work since the password was changed to the default due to the switch being on the ON position.
I know, it will require a long time but is another way to give it a try.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-10-2007 01:50 PM
тАО10-10-2007 01:50 PM
Re: Determining status of security override
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-11-2007 04:00 AM
тАО10-11-2007 04:00 AM
Re: Determining status of security override
When you download this and run it, the component extracts the utility on your client. You might want to try again and see where the utility extracted-to. The result will be CPQLOCFG.EXE. Mine extracted to my desktop.
CPQLOCFG is a command-line utility, so you first have to open a command prompt window and use it from there.
I tried the experiment successfully with a simple "do nothing" script in three phases:
1) using valid credentials Result: success
2) using invalid credentials Result: failure
3) using invalid credentials with security jumper set Result: success
--> The exact script that I tried is attached.
Below is the output that I captured.
########## First test, with valid credentials:
C:\RIBCL>cpqlocfg -s ilo2test -f secjmp.xml
CHECKING XML SYNTAX...
etc...
Valid XML Syntax
etc...
cpqlocfg: Script succeeded on "ilo2test:443"
########## Second test, with invalid credentials:
C:\RIBCL>cpqlocfg -s ilo2test -f secjmp.xml
CHECKING XML SYNTAX...
etc...
Valid XML Syntax
etc...
cpqlocfg: Response received from the RIB: (137):
MESSAGE='User login name was not found'
/>
########## Third test, with invalid credential but with the security jumper set
C:\RIBCL>cpqlocfg -s ilo2test -f secjmp.xml
CHECKING XML SYNTAX...
etc...
Valid XML Syntax
etc...
cpqlocfg: Script succeeded on "ilo2test:443"
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-11-2007 09:58 AM
тАО10-11-2007 09:58 AM
Re: Determining status of security override
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-11-2007 12:28 PM
тАО10-11-2007 12:28 PM
Re: Determining status of security override
http://h18023.www1.hp.com/support/files/lights-out/us/download/23909.html