Dell S5296F-ON EMC PowerSwitch S5200-ON Series BMC User Guide March 2021 - Page 14

<name&gt, ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user priv 3 2

Page 14 highlights

There are 10 entries for a user list. 1. Add a new user by modifying one of the empty entries in the user list using the following: $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set name 3 $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set password 3 Password for user 3: Password for user 3: Set User Password command successful (user 3) Step 1 creates a user with no access. 2. Set the privilege level for the user in Step 1 using the following: $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user priv 3 User Commands: summary [] list [] set name set password [ ] disable enable priv [] Privilege levels: * 0x1 - Callback * 0x2 - User * 0x3 - Operator * 0x4 - Administrator * 0x5 - OEM Proprietary * 0xF - No Access test [ $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user priv 3 2 Set Privilege Level command successful (user 3) $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user list ID Name Callin Link Auth IPMI Msg Channel Priv Limit 1 false false true ADMINISTRATOR 2 admin true true true ADMINISTRATOR 3 true true true USER 4 true false false NO ACCESS 5 true false false NO ACCESS 6 true false false NO ACCESS 7 true false false NO ACCESS 8 true false false NO ACCESS 9 true false false NO ACCESS 10 true false false NO ACCESS You can individually enable channels for a certain privilege level access. For example, to place the LAN channel accessible for "USER" level access, use the following: $ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -U admin -P admin channel setaccess 1 3 callin=off link=off ipmi=on privilege=1 Set User Access (channel 1 id 3) successful. $ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -L USER -U -P fru Get Device ID command failed: 0xd4 Insufficient privilege level FRU Device Description : Builtin FRU Device (ID 0) Get Device ID command failed: Insufficient privilege level $ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -U admin -P admin channel setaccess 1 3 callin=off link=off ipmi=on privilege=2 Set User Access (channel 1 id 3) successful. $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -L USER -U -P fru FRU Device Description : Builtin FRU Device (ID 0) Board Mfg Date : Mon Feb 12 08:00:00 2018 Board Mfg : Dell Board Product : Board Serial : CNCES0082C0002 Board Part Number : 0G1T60X01 Product Manufacturer : Dell Product Name : Product Version : 00 Product Serial : X1 14 Configuration methods

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41

There are 10 entries for a user list.
1.
Add a new user by modifying one of the empty entries in the user list using the following:
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set name 3
<name>
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set password 3
Password for user 3:
Password for user 3:
Set User Password command successful (user 3)
Step 1 creates a user with no access.
2.
Set the privilege level for the user in Step 1 using the following:
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user
priv 3
User Commands:
summary
[<channel number>]
list
[<channel number>]
set name
<user id> <username>
set password <user id> [<password> <16|20>]
disable
<user id>
enable
<user id>
priv
<user id> <privilege level> [<channel number>]
Privilege levels:
* 0x1 - Callback
* 0x2 - User
* 0x3 - Operator
* 0x4 - Administrator
* 0x5 - OEM Proprietary
* 0xF - No Access
test
<user id> <16|20> [<password]>
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user priv 3 2
Set Privilege Level command successful (user 3)
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user list
ID
Name
Callin
Link Auth
IPMI Msg
Channel Priv Limit
1
false
false
true
ADMINISTRATOR
2
admin
true
true
true
ADMINISTRATOR
3
<name>
true
true
true
USER
4
true
false
false
NO ACCESS
5
true
false
false
NO ACCESS
6
true
false
false
NO ACCESS
7
true
false
false
NO ACCESS
8
true
false
false
NO ACCESS
9
true
false
false
NO ACCESS
10
true
false
false
NO ACCESS
You can individually enable channels for a certain privilege level access. For example, to place the LAN channel accessible for
"USER" level access, use the following:
$ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -U admin -P admin channel setaccess 1 3 callin=off link=off ipmi=on
privilege=1
Set User Access (channel 1 id 3) successful.
$ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -L USER -U
<name>
-P
<name>
fru
Get Device ID command failed: 0xd4 Insufficient privilege level
FRU Device Description : Builtin FRU Device (ID 0)
Get Device ID command failed: Insufficient privilege level
$ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -U admin -P admin channel setaccess 1 3 callin=off link=off ipmi=on
privilege=2
Set User Access (channel 1 id 3) successful.
$ ./ipmitool -H xx.xx.xxx.xx -I lanplus -L USER -U
<name>
-P
<name>
fru
FRU Device Description : Builtin FRU Device (ID 0)
Board Mfg Date
: Mon Feb 12 08:00:00 2018
Board Mfg
: Dell
Board Product
: <
platform
>
Board Serial
: CNCES0082C0002
Board Part Number
: 0G1T60X01
Product Manufacturer
: Dell
Product Name
: <
platform
>
Product Version
: 00
Product Serial
: X1
14
Configuration methods