RMCP+ session Ask Question Asked 1 year, 3 months ago Active 2 months ago Viewed 11k times 3 I installed the ipmitool 1.8.18 in the CentOS7.2 Dedicated Server, I can use it for check self own ipmi data: # ipmitool -I open power status Chassis Power is on but I want to check other ipmi address' status, I will get this error:
Get Auth Capabilities error Error issuing Get Channel Authentication Capabilities request Error: Unable to establish IPMI v2 / RMCP+ session
in the being controlled Server I use ipmitool checked the lan:
[root@localhost ~]# ipmitool -I open lan print 1 Set in Progress : Set Complete Auth Type Support : NONE MD2 MD5 PASSWORD Auth Type Enable : Callback : MD2 MD5 PASSWORD : User : MD2 MD5 PASSWORD : Operator : MD2 MD5 PASSWORD : Admin : MD2 MD5 PASSWORD : OEM : MD2 MD5 PASSWORD IP Address Source : Static Address IP Address : 172.16.22.237 Subnet Mask : 255.255.255.0 MAC Address : 00:25:90:a9:42:4a SNMP Community String : public IP Header : TTL=0x00 Flags=0x00 Precedence=0x00 TOS=0x00 BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled Default Gateway IP : 0.0.0.0 Default Gateway MAC : 00:00:00:00:00:00 Backup Gateway IP : 0.0.0.0 Backup Gateway MAC : 00:00:00:00:00:00 802.1q VLAN ID : Disabled 802.1q VLAN Priority : 0 RMCP+ Cipher Suites : 1,2,3,6,7,8,11,12 Cipher Suite Priv Max : aaaaXXaaaXXaaXX : X=Cipher Suite Unused : c=CALLBACK : u=USER : o=OPERATOR : a=ADMIN : O=OEM Bad Password Threshold : Not Available
EDIT-01 I use nmap get bellow information: # nmap -p 623 -sU -P0 172.16.22.237
Starting Nmap 6.40 ( http://nmap.org ) at 2018-08-22 08:01 CST
Nmap scan report for 172.16.22.237 Host is up. PORT STATE SERVICE 623/udp open|filtered asf-rmcp
Nmap done: 1 IP address (1 host up) scanned in 2.11 seconds
ipmi ipmitool shareedit edited Aug 22 '18 at 8:01 asked Aug 21 '18 at 12:31
aircraft 9,41599 gold badges5757 silver badges103103 bronze badges • This seems to be an authentication error. Please take note that RMCP+ supports in addition to various authentication extensions, encryption of data transmission. – U880D Aug 22 '18 at 7:28 • I also tried the -I lan. – aircraft Aug 22 '18 at 7:32 • @U880D See my edited post, bro. – aircraft Aug 22 '18 at 7:42 • @U880D When I use the -H 172.16.22.237 -U root -P mypassword , the password is the origin password, without encryption. does this is the reason? – aircraft Aug 22 '18 at 7:46 • 1 -U admin and you must know the correct admin password. Once you are sure of those, you need to try -C0 to -C3 for different cipher suites, as it says "Cipher Suite Priv Max : aaaaXXaaaXXaaXX". – Gambit Support Aug 22 '18 at 12:29 show 5 more comments 2 Answers activeoldest votes
0 To resolve ipmi issue, need to change the IPMI over LAN setting from Disabled to **Enabled** in the iDRAC/iLO. Once after IPMI over LAN been enabled, below command provides power status.
#ipmitool -H <ipx.x.x.x> -U <username> -I lanplus power status
shareedit answered Apr 1 at 12:50
KKD 33311 gold badge22 silver badges77 bronze badges add a comment 0 Reset ipmi default password to the same or different one using the racadm command that will resolve the issue
