Tag Info

Hot answers tagged

33

I manage a lot of SuperMicro servers using the onboard IPMI. I have a love/hate relationship with the shared (aka sideband) ethernet. In general, the way these things work is that LAN1 appears to have 2 (different) MAC addresses - one is for the IPMI interface, the other your standard Broadcom NIC. Traffic to the IPMI interface (layer 2, based on the MAC ...


33

This can be useful for very, very seldom touched machines. Years after installation, if no-one can remember a login for the host, Ctrl-Alt-Delete will do proper shutdown and then let you use GRUB (or even LiLo!) to supply rw init=/bin/bash to the kernel and thus give you the chance to reset the root password. The above is also a way that Ctrl-Alt-Delete is ...


13

Jiri's on the right track with the three options (Dedicated, Share, Failover) for the IPMI interface. The short answer is that yes, you can use LAN1 instead of the dedicated IPMI port, and it generally works that way with the default BIOS settings. It's not possible to run the IPMI on the LAN2 interface. Here's a more detailed description of the three ...


12

These are all forms of out-of-band management. IPMI is a standard. DRAC is a proprietary offering from Dell. ILO is the HP ProLiant variant. ILOM for Sun/Oracle. In some cases, you may hear the terms used interchangeably. The proprietary lights-out management solutions provide more integration with the hardware and often time have nicer features ...


12

I'd probably use Ansible. It's a very simple configuration management / orchestration engine that's far simpler to get started with than Puppet (Puppet used to be my go-to choice for this, but not always now, having discovered Ansible). The benefit of Ansible here is that it communicates directly over SSH, so you'd be able to get started using just your ...


11

If you access it locally you can specify a new password. On Linux this would be done via ipmitool. Something like this should work: ipmitool -I open lan set 1 password NEWPASSWORD If you don't know which channel is your ethernet interface, just page through them one at at time, like so: # ipmitool -I open channel info 1 Channel 0x1 info: Channel ...


10

You may be running in to an unfortunate effect of the Supermicro BMC firmware. When power is applied to the power supply, the BMC powers on immediately. During the boot process the BMC (via Uboot which is booting Linux on the BMC) checks to see if the dedicated IPMI NIC port sees a link state. If not, the shared NIC port will be used. The NIC port selected ...


10

I figured out it's best not to use a socks proxy for this, but instead forward all ports necessary on a localhost IP. To evade any existing services, I use a different IP than 127.0.0.1. Assuming you chose 127.0.0.2, and your server behind the proxy is 192.168.1.1, this is the ssh command to use: ssh user@proxy-server -L127.0.0.2:443:192.168.1.1:443 ...


9

From FreeIPMI's FAQ, http://www.gnu.org/software/freeipmi/freeipmi-faq.html. Does my system support IPMI? Unfortunately, there are no universally defined mechanisms for determining if a system supports IPMI. The following may provide hints. 1) FreeIPMIā€™s ipmi-locate can be used to determine if IPMI can be found on your system. Users are cautioned though, ...


9

I just had to deal with this same issue yesterday, I was not able to log into my SuperMicro IPMI web interface because I had not used it frequently and forgot the password. The command in Insyte's answer did not work for me but it was close. This command worked to reset the ADMIN account's password: ipmitool -I open user set password 2 ADMIN The number 2 ...


9

I have written a small python tool to run command's on our 1000 machines, (and their bmc's, drac's, ilo's and imm's) What I did was write a python-framework called vsc-manage where I can run command's that are either sent to the server, or the bmc, and then configured what type of machine needs what command. I have several classes that combine a mix of ...


8

Reset does a warm boot. Cycle completely powers off the machine then powers it back on, which has the server go through a cold boot.


8

Whereas an SSH connection transmits keystrokes, an HP ILO connection transmits key states. Each time you press a key, the server receives separate KeyDown and KeyUp events. The repeated keystrokes result when the KeyUp event is received late. The two most likely reasons for the KeyUp event to be received late are: Network congestion/performance issues. ...


8

As far as I'm aware there's no standard hardware (or software) solution for this. You can't Shoot The Other Node In The Head if it's not there. You can handle this a number of different ways - one that I can suggest is using a Smart PDU - As a last resort when no other STONITH technique works command its power outlets "off" and you don't have to worry ...


8

Simply telnet to the IPMI IP Address in port 49152 and do a specific GET request. You should get your users and passwords if you're compromised. telnet server.example.com 49152 After the connection ask for GET /PSBlock and watch the results, it should be something like this: Trying 192.168.1.22... Connected to server.example.com. Escape character is ...


7

If you have ILO/IPMI/... It makes absolute sense. The only reason for CTRLALTDEL was a magic trap when nothing else would interrupt. With a control card, you don't need that - you can reset the machine anyway. Needless to say, if the machine behaves correctly, you can always 'reboot'/'shutdown -r now'/'init 6'/'systemctl reboot' from console or gui.


7

It's the temperature of what you probably think of as the "motherboard". Not everyone calls them motherboards. They've been called mainboards, system boards, planar boards, logic boards, and baseboards. Winn L. Rosch gives the gory details, including the subtle differences. Further reading Winn L. Rosch (2003). "Principles: Hardware" § ...


7

I'm not familiar with IPMI, so take this as you wish, but you should probably use an UNC path instead of a drive letter. After all, it's talking about a Windows share. Try to create a network share on your server, with a path of C:\Users\Administrator\Desktop\OperatingSystems\, and name it OperatingSystems, for example. Then, use the UNC path in IPMI, ...


6

The primary benefit of IPMI is out-of-band access for SHTF occasions, in which the kernel is typically non-functional. So, you should allow access outside the operating system. Set up a VPN or the the very least, a way for your clients to access IPMI via an ssh tunnel or something. You are right in being wary of exposing IPMI to the public internet. If your ...


6

The ability appears to exist in systems running SMASH 1.04, but not in older versions such as SMASH 1.00 or busybox. My experience is this: I was able to add SOL capability to a X8DTL by upgrading the firmware from version 2.23 to 2.43 with images downloaded from http://www.supermicro.com/support/bios/firmware0.aspx and uploading it to the HTTP interface of ...


6

Because init hasnt spawned off multiple TTYs yet (getty, mgetty, etc), so you only have the primary TTY. The primary TTY is the last console= parameter on the kernel command line. All the console parameters get the output, but only the last one will be able to act as input.


6

Here is an explanation in terms of power stats. It comes from here: http://software.intel.com/en-us/forums/showthread.php?t=80403 The "Reset" command performs a warm-reset. The equivalent to the old Ctrl-Alt-Del in DOS. The "power cycle reset" is the same as pressing the power button to turn the machine off, followed by pressing the power button again to ...


5

You're looking for a managed / remote power switch, I would guess. There are a variety of controller power switches out there that will take RS-232 / serial management interfaces. (I'll include links to a couple products below. They are not inexpensive, typically.) Some UPSs have switchable output groups and to allow you to power-cycle outlets on the UPS ...


5

Check the BIOS information for the interfaces, not just what's easy to get to from in the OS. It's becoming common for server network cards to include iSCSI (or FCoE) support built in. When they do that, it's via a shared Ethernet card, but with a different MAC address. And the different MAC address will be off by one. You might be able to stop the DHCP ...


5

Altering the append with desired parameters definitely won't help from PXELINUX in this setup, as the boot disk has its own ISOLINUX handling the kernel boot. Two ways to fix this. The simpler option: extract the ISO, modify the isolinux/isolinux.cfg file's append line with the needed boot arguments, re-pack the ISO. Have PXELINUX chain to the modified ...


5

This is a known design "problem" with some shared IPMI access. This also affects Dell DRACs that use an Avocent BMC as well. It's just the way it is. For some reference: The reason one is unable to connect to the IPMI controller from the same machine through the network on this architecture is because this controller is architected in such a way ...


5

As other people already stated, it may be a networking problem. You are supposed to be able to ping the BMC by default. However, it could also be a more insidious issue caused by the BMC not taking the new configuration in account. Try to reset the BMC: mc reset cold I have experienced this problem on many Dell IDRAC-stuffed machines, and the reset always ...


4

Can you please let me know the exact version of BMC? Also, if you know the server / motherboard model number, that will be helpful. In my experience, its possible to connect to the SOL via the SSH if the particular IPMI card supports the feature. You will need to change BIOS settings to enable SOL interface. If you don't have a manual, you can download it ...


4

/dev/ipmi* is usually restricted to root only as you've found. Your options for running ipmitool as a non-root user are (in rough order of my personal preference): Use sudo (you can create an entry in sudoers specifically for people who should be allowed to run just ipmitool if you don't want to also give them generally unrestricted sudo access) Modify ...


4

I figured it out. The way it works is pretty hokey, but here it is: It depends on whether there is a network cable plugged into the dedicated IPMI port, before the server receives power. If a cable is present, then IPMI is automatically run on that port. If there is no cable in that port, then IPMI is automatically assigned to the LAN1 port (shared with the ...



Only top voted, non community-wiki answers of a minimum length are eligible