Re: [ClusterLabs] using IPMI for fencing - configuring IPMI with ipmitool - HELP
- On Mar 1, 2017, at 5:03 AM, Andrei Borzenkov arvidj...@gmail.com wrote: > 28.02.2017 20:39, Lentes, Bernd пишет: >> Hi, >> >> i have a HP server ML 350 G9 with an ILO4 card. The riloe stonith agent does >> not >> work, i read in a book the recommendation to use the ipmi ressource agent >> instead. >> I'm trying to configure the respective ILO adapter with ipmitool. > > Why do not you simply go to iLO4 web interface and configure users there? I have users configured there. But are they visible for IPMI ? Bernd Helmholtz Zentrum Muenchen Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH) Ingolstaedter Landstr. 1 85764 Neuherberg www.helmholtz-muenchen.de Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Heinrich Bassler, Dr. Alfons Enhsen Registergericht: Amtsgericht Muenchen HRB 6466 USt-IdNr: DE 129521671 ___ Users mailing list: Users@clusterlabs.org http://lists.clusterlabs.org/mailman/listinfo/users Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org
Re: [ClusterLabs] using IPMI for fencing - configuring IPMI with ipmitool - HELP
28.02.2017 20:39, Lentes, Bernd пишет: > Hi, > > i have a HP server ML 350 G9 with an ILO4 card. The riloe stonith agent does > not work, i read in a book the recommendation to use the ipmi ressource agent > instead. > I'm trying to configure the respective ILO adapter with ipmitool. Why do not you simply go to iLO4 web interface and configure users there? ___ Users mailing list: Users@clusterlabs.org http://lists.clusterlabs.org/mailman/listinfo/users Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org
Re: [ClusterLabs] using IPMI for fencing - configuring IPMI with ipmitool - HELP
On 28/02/17 12:39 PM, Lentes, Bernd wrote: > Hi, > > i have a HP server ML 350 G9 with an ILO4 card. The riloe stonith agent does > not work, i read in a book the recommendation to use the ipmi ressource agent > instead. > I'm trying to configure the respective ILO adapter with ipmitool. OMG. > Ipmitool drives me crazy. > It's a SLES 11 SP4 node. I did "/etc/init.d/ipmi start", some modules are > loaded: > > ha-idg-1:~ # lsmod|grep -i ipmi > ipmi_devintf 17560 0 > ipmi_si53422 0 > ipmi_msghandler49979 2 ipmi_devintf,ipmi_si > > I have a device file: > > ha-idg-1:~ # ll /dev/ipm* > crw-rw 1 root root 246, 0 Feb 28 13:51 /dev/ipmi0 > > What i found out/did already: > > For channel 2 i have two users configured: > > ipmitool> user list 2 > 1 Administratortruefalse true ADMINISTRATOR > 2 root truefalse true ADMINISTRATOR > 3 (Empty User) truefalse false NO ACCESS > 4 (Empty User) truefalse false NO ACCESS > 5 (Empty User) truefalse false NO ACCESS > 6 (Empty User) truefalse false NO ACCESS > 7 (Empty User) truefalse false NO ACCESS > 8 (Empty User) truefalse false NO ACCESS > 9 (Empty User) truefalse false NO ACCESS > 10 (Empty User) truefalse false NO ACCESS > 11 (Empty User) truefalse false NO ACCESS > 12 (Empty User) truefalse false NO ACCESS > > User root has a passsword which i tested via "user test" and it was ok. > > Channel 2: > > ipmitool> channel info 2 > Channel 0x2 info: > Channel Medium Type : 802.3 LAN > Channel Protocol Type : IPMB-1.0 > Session Support : multi-session > Active Session Count : 0 > Protocol Vendor ID: 7154 > Volatile(active) Settings > Alerting: enabled > Per-message Auth: disabled > User Level Auth : enabled > Access Mode : always available > Non-Volatile Settings > Alerting: enabled > Per-message Auth: disabled > User Level Auth : enabled > Access Mode : always available > > ipmitool> lan print 2 > Set in Progress : Set Complete > Auth Type Support : > Auth Type Enable: Callback : > : User : > : Operator : > : Admin: > : OEM : > IP Address Source : DHCP Address > IP Address : 146.107.235.15 > Subnet Mask : 255.255.255.0 > MAC Address : 70:10:6f:47:0c:48 > SNMP Community String : > BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled > Default Gateway IP : 146.107.235.1 > 802.1q VLAN ID : Disabled > 802.1q VLAN Priority: 0 > RMCP+ Cipher Suites : 0,1,2,3 > Cipher Suite Priv Max : XuuaXXX > : X=Cipher Suite Unused > : c=CALLBACK > : u=USER > : o=OPERATOR > : a=ADMIN > : O=OEM > > How can i grant principal access to channel 2 ? > I tried: > > ipmitool> lan set 2 access on > Set Channel Access for channel 2 failed: Unknown (0x83) > ipmitool> lan set 2 access ON > lan set access > ipmitool> lan set 2 access=ON > lan set access > > Does not seem to work. > > I did "lan set user 2", do not know if it's helpful. > > Also: > > ipmitool> channel authcap 2 4 > Channel number : 2 > IPMI v1.5 auth types : > KG status : default (all zeroes) > Per message authentication : disabled > User level authentication : enabled > Non-null user names exist : yes > Null user names exist : no > Anonymous login enabled: no > Channel supports IPMI v1.5 : no > Channel supports IPMI v2.0 : yes > > Don't know if it helps. > > I found > https://www.thomas-krenn.com/de/wiki/IPMI_Konfiguration_unter_Linux_mittels_ipmitool > (sorry, only in german): > > I did, as proposed: > > ha-idg-1:~ # ipmitool lan set 2 auth ADMIN MD5 > ha-idg-1:~ # ipmitool lan set 2 access on > Set Channel Access for channel 2 failed: Unknown (0x83) <= ??? > > ha-idg-1:~ # ipmitool lan print 2 > Set in Progress : Set Complete > Auth Type Support : > Auth Type Enable: Callback : > : User : > : Operator : > : Admin: > : OEM : > IP Address Source : DHCP Address > IP Address : 146.107.235.15 > Subnet Mask : 255.255.255.0 > MAC Address : 70:10:6f:47:0c:48 > SNMP Community String : > BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled > Default Gateway IP : 146.107.235.1 > 802.1q VLAN
[ClusterLabs] using IPMI for fencing - configuring IPMI with ipmitool - HELP
Hi, i have a HP server ML 350 G9 with an ILO4 card. The riloe stonith agent does not work, i read in a book the recommendation to use the ipmi ressource agent instead. I'm trying to configure the respective ILO adapter with ipmitool. OMG. Ipmitool drives me crazy. It's a SLES 11 SP4 node. I did "/etc/init.d/ipmi start", some modules are loaded: ha-idg-1:~ # lsmod|grep -i ipmi ipmi_devintf 17560 0 ipmi_si53422 0 ipmi_msghandler49979 2 ipmi_devintf,ipmi_si I have a device file: ha-idg-1:~ # ll /dev/ipm* crw-rw 1 root root 246, 0 Feb 28 13:51 /dev/ipmi0 What i found out/did already: For channel 2 i have two users configured: ipmitool> user list 2 1 Administratortruefalse true ADMINISTRATOR 2 root truefalse true ADMINISTRATOR 3 (Empty User) truefalse false NO ACCESS 4 (Empty User) truefalse false NO ACCESS 5 (Empty User) truefalse false NO ACCESS 6 (Empty User) truefalse false NO ACCESS 7 (Empty User) truefalse false NO ACCESS 8 (Empty User) truefalse false NO ACCESS 9 (Empty User) truefalse false NO ACCESS 10 (Empty User) truefalse false NO ACCESS 11 (Empty User) truefalse false NO ACCESS 12 (Empty User) truefalse false NO ACCESS User root has a passsword which i tested via "user test" and it was ok. Channel 2: ipmitool> channel info 2 Channel 0x2 info: Channel Medium Type : 802.3 LAN Channel Protocol Type : IPMB-1.0 Session Support : multi-session Active Session Count : 0 Protocol Vendor ID: 7154 Volatile(active) Settings Alerting: enabled Per-message Auth: disabled User Level Auth : enabled Access Mode : always available Non-Volatile Settings Alerting: enabled Per-message Auth: disabled User Level Auth : enabled Access Mode : always available ipmitool> lan print 2 Set in Progress : Set Complete Auth Type Support : Auth Type Enable: Callback : : User : : Operator : : Admin: : OEM : IP Address Source : DHCP Address IP Address : 146.107.235.15 Subnet Mask : 255.255.255.0 MAC Address : 70:10:6f:47:0c:48 SNMP Community String : BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled Default Gateway IP : 146.107.235.1 802.1q VLAN ID : Disabled 802.1q VLAN Priority: 0 RMCP+ Cipher Suites : 0,1,2,3 Cipher Suite Priv Max : XuuaXXX : X=Cipher Suite Unused : c=CALLBACK : u=USER : o=OPERATOR : a=ADMIN : O=OEM How can i grant principal access to channel 2 ? I tried: ipmitool> lan set 2 access on Set Channel Access for channel 2 failed: Unknown (0x83) ipmitool> lan set 2 access ON lan set access ipmitool> lan set 2 access=ON lan set access Does not seem to work. I did "lan set user 2", do not know if it's helpful. Also: ipmitool> channel authcap 2 4 Channel number : 2 IPMI v1.5 auth types : KG status : default (all zeroes) Per message authentication : disabled User level authentication : enabled Non-null user names exist : yes Null user names exist : no Anonymous login enabled: no Channel supports IPMI v1.5 : no Channel supports IPMI v2.0 : yes Don't know if it helps. I found https://www.thomas-krenn.com/de/wiki/IPMI_Konfiguration_unter_Linux_mittels_ipmitool (sorry, only in german): I did, as proposed: ha-idg-1:~ # ipmitool lan set 2 auth ADMIN MD5 ha-idg-1:~ # ipmitool lan set 2 access on Set Channel Access for channel 2 failed: Unknown (0x83) <= ??? ha-idg-1:~ # ipmitool lan print 2 Set in Progress : Set Complete Auth Type Support : Auth Type Enable: Callback : : User : : Operator : : Admin: : OEM : IP Address Source : DHCP Address IP Address : 146.107.235.15 Subnet Mask : 255.255.255.0 MAC Address : 70:10:6f:47:0c:48 SNMP Community String : BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled Default Gateway IP : 146.107.235.1 802.1q VLAN ID : Disabled 802.1q VLAN Priority: 0 RMCP+ Cipher Suites : 0,1,2,3 Cipher Suite Priv Max : XuuaXXX : X=Cipher Suite Unused : c=CALLBACK : u=USER : o=OPERATOR :