> From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org]
> On Behalf Of Dave Caplinger
>
> Have you (or anyone else on the list) had any success using 'impitool' (from
> OpenIPMI; already in many Linux distros) 

Yes, but security is a pain.  By default, IPMI is available only to localhost, 
and if that's all you need, then great.  Should be easy to use.  But if you 
want to give it an IP address and make it available over the network ... It's 
an unencrypted protocol that's well supported, and easily gives any schmo or 
virus on your network the ability to do all sorts of bad things.  You can 
enable encryption, but if you don't have an OS with IPMI in it (for example, 
ESX) then you have to type in a long random string into BIOS by hand, which is 
your encryption key.  And then there are compatibility problems.  The only 
client I've found to work reliably is the linux command-line ipmitool.

I have it, and a process, and it's worked, but recently I followed my own 
process on a new server and it didn't work for an unknown reason.  It's very 
frustrating.

But if you don't bother with network, if you have an ipmi utility running 
directly on the host, and that satisfies your needs, then it's easy and should 
be good and reliable.

To me, the main value of ipmi is remote power control.  Which is of course, not 
possible with an agent running in the OS.

_______________________________________________
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to