Ad Widget

Collapse

Change IPMI cipher suite

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • cstackpole
    Senior Member
    Zabbix Certified Specialist
    • Oct 2006
    • 225

    #1

    Change IPMI cipher suite

    Greetings,
    I've successfully been monitoring a bunch of supermicro servers with IPMI on Zabbix 5.2. It seems the supermicro servers use the default of '-C 3' and are working just fine. The new servers are Intel and they will ONLY work with the '-C 17' cipher suite ID. Thus, all my Intel servers are getting:
    cannot connect to IPMI host: [XXXXXX] Unknown error 33554433
    If I drop to the command line:
    Code:
    $ ipmitool -I lanplus -H <host> -U <user> -P <pass> sensor
    Error in open session response message: insufficient resources for session
    Error: unable to establish IPMI v2 / RMCP+ session
    $
    $
    $ ipmitool -I lanplus -H <host> -U <user> -P <pass> -C 17 sensor
    <snip data - there's a lot of it>
    I don't see anything particularly relevant in the debug logs. Just a failure that it can't enable the check.

    How can I change the cipher level that Zabbix uses for these new hosts only?
  • Hamardaban
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • May 2019
    • 2713

    #2
    Может проще включить id 3 на серверах intel?
    по умолчанию отключено. или они совсем выпилили?

    https://www.intel.com/content/dam/su...User_Guide.pdf

    Comment

    • cstackpole
      Senior Member
      Zabbix Certified Specialist
      • Oct 2006
      • 225

      #3
      Thanks Hamardaban!

      It seems that Intel is pushing hard on all new systems being set to the higher security level. Between the link you gave me and a bunch of reading on IPMI, I was able to learn enough to create a read-only user with permissions on -C 3 level that I was able to use successfully with Zabbix.

      Comment

      Working...