Otdfbt

Why could the Lunar Ascent Engine be used only once?

How to convince boss to spend notice period on documentation instead of new projects

On a piano, are the effects of holding notes and the sustain pedal the same for a single chord?

How was the blinking terminal cursor invented?

What does it mean for a program to be 32 or 64 bit?

Is being an extrovert a necessary condition to be a manager?

Is presenting a play showing Military charactes in a bad light a crime in the US?

Germany rejected my entry to Schengen countries

How do I unravel apparent recursion in an edef statement?

Isn't Kirchhoff's junction law a violation of conservation of charge?

Vehemently against code formatting

Why were early aviators' trousers flared at the thigh?

Why is so much ransomware breakable?

Good examples of "two is easy, three is hard" in computational sciences

What were the "pills" that were added to solid waste in Apollo 7?

Very serious stuff - Salesforce bug enabled "Modify All"

Hotel booking: Why is Agoda much cheaper than booking.com?

How can sister protect herself from impulse purchases with a credit card?

How could Dwarves prevent sand from filling up their settlements

Why does Taylor’s series “work”?

Parse a C++14 integer literal

Greek theta instead of lower case þ (Icelandic) in TexStudio

Is there any official Lore on Keraptis the Wizard, apart from what is in White Plume Mountain?

Why would Thor need to strike a building with lightning to attack enemies?

ipmitool: “Insufficient privilege level” for administrator

IPMI not fucntioning with Network BondingRunning ipmitool as a non-root userPassword setting for IPMI in LinuxCan I use ipmitool to determine which IPMI link is 'up'?ipmitool pef temperature soft shutdownChanging network boot order (pxe) using ipmitoolipmitool not functioning the same after upgrade to 14.04Supermicro IPMI Bug ? I can't get chassis status via ipmitoolipmitool: how to deal with frozen SOL sessionWhat is the ipmitool “Auth Type”?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I'm trying to add the second administrator to IPMI:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw user list
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
2 ADMIN false false true ADMINISTRATOR
6 TESTUSR true false false ADMINISTRATOR

I could login into web-ui and act as administrator using TESTUSR, but when I'm trying to use it with ipmitool - it don't work as planned:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw chassis status
System Power : on
Power Overload : false
Power Interlock : inactive
Main Power Fault : false
Power Control Fault : false
Power Restore Policy : previous
Last Power Event : 
Chassis Intrusion : inactive
Front-Panel Lockout : inactive
Drive Fault : false
Cooling/Fan Fault : false

$ ipmitool -v -I lanplus -H $ip -U TESTUSR -P $passw chassis status
Get Device ID command failed: 0xd4 Insufficient privilege level
Get HPM.x Capabilities request failed, compcode = d4

Running Get PICMG Properties my_addr 0x20, transit 0, target 0x20
Error Response 0xd4 from Get PICMG Properities
No PICMG Extenstion discovered
Error sending Chassis Status command: Insufficient privilege level

Adding -L ADMINISTRATOR don't changes anything.

Any ideas why one administrator is "better" then the other one?

ipmi ipmitool

share|improve this question

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

add a comment | 

0

I'm trying to add the second administrator to IPMI:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw user list
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
2 ADMIN false false true ADMINISTRATOR
6 TESTUSR true false false ADMINISTRATOR

I could login into web-ui and act as administrator using TESTUSR, but when I'm trying to use it with ipmitool - it don't work as planned:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw chassis status
System Power : on
Power Overload : false
Power Interlock : inactive
Main Power Fault : false
Power Control Fault : false
Power Restore Policy : previous
Last Power Event : 
Chassis Intrusion : inactive
Front-Panel Lockout : inactive
Drive Fault : false
Cooling/Fan Fault : false

$ ipmitool -v -I lanplus -H $ip -U TESTUSR -P $passw chassis status
Get Device ID command failed: 0xd4 Insufficient privilege level
Get HPM.x Capabilities request failed, compcode = d4

Running Get PICMG Properties my_addr 0x20, transit 0, target 0x20
Error Response 0xd4 from Get PICMG Properities
No PICMG Extenstion discovered
Error sending Chassis Status command: Insufficient privilege level

Adding -L ADMINISTRATOR don't changes anything.

Any ideas why one administrator is "better" then the other one?

ipmi ipmitool

share|improve this question

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

add a comment | 

I'm trying to add the second administrator to IPMI:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw user list
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
2 ADMIN false false true ADMINISTRATOR
6 TESTUSR true false false ADMINISTRATOR

I could login into web-ui and act as administrator using TESTUSR, but when I'm trying to use it with ipmitool - it don't work as planned:

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw chassis status
System Power : on
Power Overload : false
Power Interlock : inactive
Main Power Fault : false
Power Control Fault : false
Power Restore Policy : previous
Last Power Event : 
Chassis Intrusion : inactive
Front-Panel Lockout : inactive
Drive Fault : false
Cooling/Fan Fault : false

$ ipmitool -v -I lanplus -H $ip -U TESTUSR -P $passw chassis status
Get Device ID command failed: 0xd4 Insufficient privilege level
Get HPM.x Capabilities request failed, compcode = d4

Running Get PICMG Properties my_addr 0x20, transit 0, target 0x20
Error Response 0xd4 from Get PICMG Properities
No PICMG Extenstion discovered
Error sending Chassis Status command: Insufficient privilege level

Adding -L ADMINISTRATOR don't changes anything.

Any ideas why one administrator is "better" then the other one?

ipmi ipmitool

share|improve this question

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw user list
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
2 ADMIN false false true ADMINISTRATOR
6 TESTUSR true false false ADMINISTRATOR

$ ipmitool -I lanplus -H $ip -U ADMIN -P $passw chassis status
System Power : on
Power Overload : false
Power Interlock : inactive
Main Power Fault : false
Power Control Fault : false
Power Restore Policy : previous
Last Power Event : 
Chassis Intrusion : inactive
Front-Panel Lockout : inactive
Drive Fault : false
Cooling/Fan Fault : false

$ ipmitool -v -I lanplus -H $ip -U TESTUSR -P $passw chassis status
Get Device ID command failed: 0xd4 Insufficient privilege level
Get HPM.x Capabilities request failed, compcode = d4

Running Get PICMG Properties my_addr 0x20, transit 0, target 0x20
Error Response 0xd4 from Get PICMG Properities
No PICMG Extenstion discovered
Error sending Chassis Status command: Insufficient privilege level

share|improve this question

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

share|improve this question

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

asked Jun 23 '16 at 16:49

AntonioKAntonioK

2991720

1 Answer
1

active

oldest

votes

0

There is a privilege level for each user in addition to the channel. So one possibility is the privilege level for the user is not set correctly.

Looking through the ipmitool manpage, it appears the command you want is:

ipmitool user priv <userid> <privilege level> [<channel number>]

Trying it really quick, for some reason the privilege level has to be specified as a number (4 for admin). You can use channel info <num> to find the LAN channel (see manpage for more info).

I can't seem to find the ipmitool options to see the present privilege level for the user on a channel. Sorry if it's there and I can't find the right combo of options. I am more familiar with freeipmi. Using bmc-config you can see it like this (such as with user ID 3):

bmc-config --checkout --section=user3

share|improve this answer

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f785872%2fipmitool-insufficient-privilege-level-for-administrator%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

There is a privilege level for each user in addition to the channel. So one possibility is the privilege level for the user is not set correctly.

Looking through the ipmitool manpage, it appears the command you want is:

ipmitool user priv <userid> <privilege level> [<channel number>]

Trying it really quick, for some reason the privilege level has to be specified as a number (4 for admin). You can use channel info <num> to find the LAN channel (see manpage for more info).

I can't seem to find the ipmitool options to see the present privilege level for the user on a channel. Sorry if it's there and I can't find the right combo of options. I am more familiar with freeipmi. Using bmc-config you can see it like this (such as with user ID 3):

bmc-config --checkout --section=user3

share|improve this answer

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

add a comment | 

0

There is a privilege level for each user in addition to the channel. So one possibility is the privilege level for the user is not set correctly.

Looking through the ipmitool manpage, it appears the command you want is:

ipmitool user priv <userid> <privilege level> [<channel number>]

Trying it really quick, for some reason the privilege level has to be specified as a number (4 for admin). You can use channel info <num> to find the LAN channel (see manpage for more info).

I can't seem to find the ipmitool options to see the present privilege level for the user on a channel. Sorry if it's there and I can't find the right combo of options. I am more familiar with freeipmi. Using bmc-config you can see it like this (such as with user ID 3):

bmc-config --checkout --section=user3

share|improve this answer

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

add a comment | 

There is a privilege level for each user in addition to the channel. So one possibility is the privilege level for the user is not set correctly.

Looking through the ipmitool manpage, it appears the command you want is:

ipmitool user priv <userid> <privilege level> [<channel number>]

Trying it really quick, for some reason the privilege level has to be specified as a number (4 for admin). You can use channel info <num> to find the LAN channel (see manpage for more info).

I can't seem to find the ipmitool options to see the present privilege level for the user on a channel. Sorry if it's there and I can't find the right combo of options. I am more familiar with freeipmi. Using bmc-config you can see it like this (such as with user ID 3):

bmc-config --checkout --section=user3

share|improve this answer

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

ipmitool user priv <userid> <privilege level> [<channel number>]

bmc-config --checkout --section=user3

share|improve this answer

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625

answered Jun 24 '16 at 5:38

Albert ChuAlbert Chu

56625