RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 648892 - Fix manual page to describe usage of fence_ipmi with ilo3
Summary: Fix manual page to describe usage of fence_ipmi with ilo3
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: fence-agents
Version: 6.1
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: rc
: ---
Assignee: Marek Grac
QA Contact: Cluster QE
URL:
Whiteboard:
Depends On:
Blocks: 671086 671089 921936
TreeView+ depends on / blocked
 
Reported: 2010-11-02 13:01 UTC by Marek Grac
Modified: 2016-04-26 14:23 UTC (History)
5 users (show)

Fixed In Version: fence-agents-3.0.12-12.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 671086 671089 921936 (view as bug list)
Environment:
Last Closed: 2011-05-19 14:21:49 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Proposed patch (1.14 KB, patch)
2011-01-13 14:11 UTC, Marek Grac
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:0745 0 normal SHIPPED_LIVE fence-agents bug fix and enhancement update 2011-05-19 09:37:09 UTC

Description Marek Grac 2010-11-02 13:01:18 UTC
Description of problem:

HP iLo 3 needs a special option to delay fencing. Recommended values are not part of the manual pages.

Comment 3 Brian Likosar 2010-12-21 14:32:52 UTC
What are the recommended values that should be set?

Comment 4 Marek Grac 2011-01-03 10:13:22 UTC
* you should use lanplus option 
* you should use power_wait = 4 (on some machines this is not needed at all)

Comment 5 Marek Grac 2011-01-13 14:11:40 UTC
Created attachment 473324 [details]
Proposed patch

Comment 6 Don Hoover 2011-01-27 20:47:25 UTC
Is the fix from bug 642700 from rhel5 going to be ported over to the fence_ilo on rhel6 as well so you can use fence_ilo instead of ipmi for the ilo3?

Comment 7 Marek Grac 2011-01-28 11:47:16 UTC
@Don:

The bug 642700 does not talk about adding support to fence_ilo. It contains fix for fence_ipmilan to be able to work with ilo3. Do you have any specific reason why you want to use fence_ilo instead of ipmi?

Comment 8 Don Hoover 2011-01-28 15:43:16 UTC
I did test fence_ipmilan actaully yesterday and got it to work.  However, I was hoping that fence_ilo would work with the ILO3 for one specific reason.

HP in all their infinate wisdom apparently only lets ILO accounts that have full administrator priv's use ipmi to do the stuff that is required for fencing (view and control power), so I have to create an account on my ILO that now has every privelage enabled except for user mgmt apparently.  

With fence_ilo I could create a login on the ILO with the single priv of "control power" and take away all other priveleages. 

I was much more comforatable doing this because the fence username and password are pretty much out there for anyone on the system to get if they wanted to.

Maybe I am just one of those rare security consuous systems admins, but the way fence_ipmilan makes me kinda leery of using it since it will be bascially putting login credentials with nearly full control of the ilo out into the open.

Comment 9 Perry Myers 2011-01-28 16:02:47 UTC
We have no plans to write a new fence agent specific to iLO3 hardware.  Our general policy is that if a fence device exposes a generic/standards compliant interface then we use that interface and do not develop a custom device specific one.  (i.e. snmp/ifmib, ipmi, scsi are the primary standard interfaces that we target)

Comment 12 errata-xmlrpc 2011-05-19 14:21:49 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0745.html


Note You need to log in before you can comment on or make changes to this bug.