URL: <https://savannah.gnu.org/support/?111294>
Summary: ipmi-config is missing some settings for iDRAC 9 and
it's creating users without sufficient permissions
Group: GNU FreeIPMI
Submitter: None
Submitted: Thu 31 Jul 2025 10:36:10 AM UTC
Category: bmc-config
Priority: 5 - Normal
Severity: 5 - Blocker
Status: None
Privacy: Public
Assigned to: None
Originator Email: [email protected]
Open/Closed: Open
Discussion Lock: Any
Operating System: GNU/Linux
_______________________________________________________
Follow-up Comments:
-------------------------------------------------------
Date: Thu 31 Jul 2025 10:36:10 AM UTC By: Anonymous
On iDRAC 9, the following ipmi-config command
```
ipmi-config --commit --key-pair=User3:Username=maas
ipmi-config --commit --key-pair=User3:Password=REDACTED
ipmi-config --commit --key-pair=User3:Enable_User=Yes
ipmi-config --commit --key pair=User3:Lan_Privilege_Limit=Administrator
ipmi-config --commit --key-pair=User3:Lan_Enable_IPMI_Msgs=Yes
ipmi-config --commit --key-pair=User3:Lan_Enable_Link_Auth=Yes
ipmi-config --commit --key-pair=User3:SOL_Payload_Access=Yes
ipmi-config --commit --key-pair=User3:Serial_Enable_Link_Auth=Yes
```
creates a user without sufficient permissions (see attachments).
Also, creating the user with the UI and running `ipmi-config --checkout`
returns
```
Section User2
## Give Username
Username ubuntu
## Give password or blank to clear. MAX 16 chars (20 chars if IPMI 2.0
supported).
## Password
## Possible values: Yes/No or blank to not set
Enable_User Yes
## Possible values: Yes/No
Lan_Enable_IPMI_Msgs Yes
## Possible values: Yes/No
Lan_Enable_Link_Auth Yes
## Possible values: Yes/No
Lan_Enable_Restricted_to_Callback No
## Possible values:
Callback/User/Operator/Administrator/OEM_Proprietary/No_Access
Lan_Privilege_Limit Administrator
## Possible values: 0-17, 0 is unlimited; May be reset to 0 if not
specified
## Lan_Session_Limit
## Possible values: Yes/No
SOL_Payload_Access Yes
EndSection
Section User3
## Give Username
Username maas
## Give password or blank to clear. MAX 16 chars (20 chars if IPMI 2.0
supported).
## Password
## Possible values: Yes/No or blank to not set
Enable_User Yes
## Possible values: Yes/No
Lan_Enable_IPMI_Msgs Yes
## Possible values: Yes/No
Lan_Enable_Link_Auth Yes
## Possible values: Yes/No
Lan_Enable_Restricted_to_Callback No
## Possible values:
Callback/User/Operator/Administrator/OEM_Proprietary/No_Access
Lan_Privilege_Limit Administrator
## Possible values: 0-17, 0 is unlimited; May be reset to 0 if not
specified
## Lan_Session_Limit
## Possible values: Yes/No
SOL_Payload_Access Yes
EndSection
```
It looks like ipmi-config it's missing such settings.
_______________________________________________________
File Attachments:
-------------------------------------------------------
Name: Screenshot@from@[email protected] Size: 77KiB
<http://file.savannah.gnu.org/file/Screenshot%40from%402025-07-31%4012-33-28.png?file_id=57458>
-------------------------------------------------------
Name: Screenshot@from@[email protected] Size: 50KiB
<http://file.savannah.gnu.org/file/Screenshot%40from%402025-07-31%4012-33-40.png?file_id=57459>
-------------------------------------------------------
Name: Screenshot@from@[email protected] Size: 49KiB
<http://file.savannah.gnu.org/file/Screenshot%40from%402025-07-31%4012-33-46.png?file_id=57460>
AGPL NOTICE
These attachments are served by Savane. You can download the corresponding
source code of Savane at
https://savannah.gnu.org/source/savane-b2d0539a05b0ab26e2021565150d8b6a46eb09f6.tar.gz
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/support/?111294>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
signature.asc
Description: PGP signature
