Hot answers tagged

34

I manage a lot of SuperMicro servers using the onboard IPMI. I have a love/hate relationship with the shared (aka sideband) ethernet. In general, the way these things work is that LAN1 appears to have 2 (different) MAC addresses - one is for the IPMI interface, the other your standard Broadcom NIC. Traffic to the IPMI interface (layer 2, based on the MAC ...


34

This can be useful for very, very seldom touched machines. Years after installation, if no-one can remember a login for the host, Ctrl-Alt-Delete will do proper shutdown and then let you use GRUB (or even LiLo!) to supply rw init=/bin/bash to the kernel and thus give you the chance to reset the root password. The above is also a way that Ctrl-Alt-Delete is ...


18

Jiri's on the right track with the three options (Dedicated, Share, Failover) for the IPMI interface. The short answer is that yes, you can use LAN1 instead of the dedicated IPMI port, and it generally works that way with the default BIOS settings. It's not possible to run the IPMI on the LAN2 interface. Here's a more detailed description of the three ...


18

These are all forms of out-of-band management. IPMI is a standard. DRAC is a proprietary offering from Dell. ILO is the HP ProLiant variant. ILOM for Sun/Oracle. In some cases, you may hear the terms used interchangeably. The proprietary lights-out management solutions provide more integration with the hardware and often time have nicer features (...


16

If you access it locally you can specify a new password. On Linux this would be done via ipmitool. Something like this should work: ipmitool -I open lan set 1 password NEWPASSWORD If you don't know which channel is your ethernet interface, just page through them one at at time, like so: # ipmitool -I open channel info 1 Channel 0x1 info: Channel ...


15

I figured out it's best not to use a socks proxy for this, but instead forward all ports necessary on a localhost IP. To evade any existing services, I use a different IP than 127.0.0.1. Assuming you chose 127.0.0.2, and your server behind the proxy is 192.168.1.1, this is the ssh command to use: ssh user@proxy-server -L127.0.0.2:443:192.168.1.1:443 -...


14

I just had to deal with this same issue yesterday, I was not able to log into my SuperMicro IPMI web interface because I had not used it frequently and forgot the password. The command in Insyte's answer did not work for me but it was close. This command worked to reset the ADMIN account's password: ipmitool -I open user set password 2 ADMIN The number 2 ...


14

I'd probably use Ansible. It's a very simple configuration management / orchestration engine that's far simpler to get started with than Puppet (Puppet used to be my go-to choice for this, but not always now, having discovered Ansible). The benefit of Ansible here is that it communicates directly over SSH, so you'd be able to get started using just your ...


13

From FreeIPMI's FAQ section: 7. Does my system support IPMI?. Does my system support IPMI? Unfortunately, there are no universally defined mechanisms for determining if a system supports IPMI via Inband communication. Assuming IPMI is set up correctly for over LAN communication, a fairly reliable mechanism exists out-of-band. Here are some ...


10

You may be running in to an unfortunate effect of the Supermicro BMC firmware. When power is applied to the power supply, the BMC powers on immediately. During the boot process the BMC (via Uboot which is booting Linux on the BMC) checks to see if the dedicated IPMI NIC port sees a link state. If not, the shared NIC port will be used. The NIC port selected ...


10

Whereas an SSH connection transmits keystrokes, an HP ILO connection transmits key states. Each time you press a key, the server receives separate KeyDown and KeyUp events. The repeated keystrokes result when the KeyUp event is received late. The two most likely reasons for the KeyUp event to be received late are: Network congestion/performance issues. ...


10

I have written a small python tool to run command's on our 1000 machines, (and their bmc's, drac's, ilo's and imm's) What I did was write a python-framework called vsc-manage where I can run command's that are either sent to the server, or the bmc, and then configured what type of machine needs what command. I have several classes that combine a mix of ...


9

Reset does a warm boot. Cycle completely powers off the machine then powers it back on, which has the server go through a cold boot.


9

Simply telnet to the IPMI IP Address in port 49152 and do a specific GET request. You should get your users and passwords if you're compromised. telnet server.example.com 49152 After the connection ask for GET /PSBlock and watch the results, it should be something like this: Trying 192.168.1.22... Connected to server.example.com. Escape character is '^]'....


8

I'm not familiar with IPMI, so take this as you wish, but you should probably use an UNC path instead of a drive letter. After all, it's talking about a Windows share. Try to create a network share on your server, with a path of C:\Users\Administrator\Desktop\OperatingSystems\, and name it OperatingSystems, for example. Then, use the UNC path in IPMI, ...


8

In these boards, the ipmi interface can only be configured on the 1rst LAN or in the dedicated one, and you can choose it by issuing some raw commands. My steps to enable the dedicated LAN on a X8DTU-F board are these: #install ipmitool (this is for debian) apt-get install ipmitool #insert the kernel modules needed for ipmi modprobe ipmi_devintf modprobe ...


8

As far as I'm aware there's no standard hardware (or software) solution for this. You can't Shoot The Other Node In The Head if it's not there. You can handle this a number of different ways - one that I can suggest is using a Smart PDU - As a last resort when no other STONITH technique works command its power outlets "off" and you don't have to worry ...


7

Here is an explanation in terms of power stats. It comes from here: http://software.intel.com/en-us/forums/showthread.php?t=80403 The "Reset" command performs a warm-reset. The equivalent to the old Ctrl-Alt-Del in DOS. The "power cycle reset" is the same as pressing the power button to turn the machine off, followed by pressing the power button again to ...


7

Yes, it does. The IPMI controller and video controller are linked, which is what allows the IPMI controller to actually get you the contents of your screen. When you are using an external display adapter, all the "rendering" takes place on the card, so the IPMI adapter has no idea is being displayed.


7

It's the temperature of what you probably think of as the "motherboard". Not everyone calls them motherboards. They've been called mainboards, system boards, planar boards, logic boards, and baseboards. Winn L. Rosch gives the gory details, including the subtle differences. Further reading Winn L. Rosch (2003). "Principles: Hardware" § ...


7

I figured it out. The way it works is pretty hokey, but here it is: It depends on whether there is a network cable plugged into the dedicated IPMI port, before the server receives power. If a cable is present, then IPMI is automatically run on that port. If there is no cable in that port, then IPMI is automatically assigned to the LAN1 port (shared with the ...


7

As other people already stated, it may be a networking problem. You are supposed to be able to ping the BMC by default. However, it could also be a more insidious issue caused by the BMC not taking the new configuration in account. Try to reset the BMC: mc reset cold I have experienced this problem on many Dell IDRAC-stuffed machines, and the reset always ...


7

The ability appears to exist in systems running SMASH 1.04, but not in older versions such as SMASH 1.00 or busybox. My experience is this: I was able to add SOL capability to a X8DTL by upgrading the firmware from version 2.23 to 2.43 with images downloaded from http://www.supermicro.com/support/bios/firmware0.aspx and uploading it to the HTTP interface of ...


7

If you have ILO/IPMI/... It makes absolute sense. The only reason for CTRLALTDEL was a magic trap when nothing else would interrupt. With a control card, you don't need that - you can reset the machine anyway. Needless to say, if the machine behaves correctly, you can always 'reboot'/'shutdown -r now'/'init 6'/'systemctl reboot' from console or gui.


6

Ideally, your management network would be a different network to your other network, or at least a different vlan with limited routed access. These systems aren't really running that many services though: PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https 555/tcp open dsf 5120/tcp open unknown 5900/tcp open vnc 5988/tcp ...


6

Because init hasnt spawned off multiple TTYs yet (getty, mgetty, etc), so you only have the primary TTY. The primary TTY is the last console= parameter on the kernel command line. All the console parameters get the output, but only the last one will be able to act as input.


6

This is a known design "problem" with some shared IPMI access. This also affects Dell DRACs that use an Avocent BMC as well. It's just the way it is. For some reference: The reason one is unable to connect to the IPMI controller from the same machine through the network on this architecture is because this controller is architected in such a way ...


6

The primary benefit of IPMI is out-of-band access for SHTF occasions, in which the kernel is typically non-functional. So, you should allow access outside the operating system. Set up a VPN or the the very least, a way for your clients to access IPMI via an ssh tunnel or something. You are right in being wary of exposing IPMI to the public internet. If your ...


6

ipmitool might use sensor number and sensor name for command output. You can use the following command to print the command output in a more friendly format: ipmitool -H <ipmi_ip> -U <ipmi_user> -P <ipmi_password> sdr elist This will output all sensor names in your server mapped to the corresponding sensor numbers. As can be seen from ...


5

You're looking for a managed / remote power switch, I would guess. There are a variety of controller power switches out there that will take RS-232 / serial management interfaces. (I'll include links to a couple products below. They are not inexpensive, typically.) Some UPSs have switchable output groups and to allow you to power-cycle outlets on the UPS ...



Only top voted, non community-wiki answers of a minimum length are eligible