iLO 5 REST API ResourceMissingAtURI for LDAP-Based Sessions

[powercleee]

Hi!

I'm trying to follow best practices and remove an iLO session via the REST API but it fails with "ResourceMissingAtURI" for any user authenticated via LDAP where the username is in the format "user@domain.com" or "domain\user".

The issue seems to be where the iLO cannot process the URL encoding of the API resource where "@" becomes %40 and "\" becomes %

user@domain.com --> user%40domain.com
domain\user --> domain%5cuser

So, my API resouce is either:

https://server01ilo.domain.local/redfish/v1/SessionService/Sessions/domain%5cuser0000000067fea94fc408b02
https://server01ilo.domain.local/redfish/v1/SessionService/Sessions/user%40domain.local0000000067fea94fc408b02

This does not fail for any local iLO user, which don't have any "special characters" that then need to be URL encoded.

Attached are screenshots where I attempt to remove/get a session for a user in both formats, but fail. The last screenshot is from a local user without any "special characters" and it succeeds.

Could someone @ HPE please confirm and if so, could we get a firmware update to resolve this issue? Thank you!

Currently running iLO 5 firmware 3.10

[support_s]

System recommended content:

1. HPE iLO 5 User Guide | iLO RESTful API

2. HPE iLO 5 1.40 User Guide | iLO RESTful API

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.