59d5110b8f
Also enable ipmi if user sets in console.method
2019-08-20 09:29:25 -04:00
051d79727b
Fix sysvinit
...
sysvinit lsb function is 'status_of_proc'
2019-08-20 08:59:01 -04:00
4cdbc7807b
Add thinkagile storage to discovery
...
At least enumerate the ipv4 pieces.
2019-08-19 16:37:14 -04:00
feecee82db
Mitigate excessive open web sessions
...
Back to back discovery testing would exhaust web slots.
Severely mitigate through being more aggressive about logging out.
2019-08-19 10:44:47 -04:00
395c0d4697
Preserve IPMI state unless user wants otherwise
...
ALso a draft of navigating a forced password change
in the midst of a pre-hashed password conversion.
2019-08-16 16:33:57 -04:00
a963a8ca35
Handle forced password change and no IPMI for XCC
...
XCC firmware will start mandating a password change before use.
Additionally, IPMI will be unavailable and will be needed for enabling SMM.
TODO:
-Discover USERID/TempW0rd42 nodes that weren't preconfigged
-Enable IPMI on non-SD530 if hardwaremanagement.method is not redfish.
2019-08-15 16:40:15 -04:00
3f6e6d4c39
Support unavailable sensors in redfish
2019-08-08 15:02:26 -04:00
c3176ab86a
Add blink and identify reporting to redfish
2019-08-05 16:22:50 -04:00
4dab5fc527
Adapt to RHEL or Debian openssl config locations
2019-08-05 16:16:42 -04:00
8897842fc4
Fix SMM handler when None bmc
...
This fixes a common scenario for using fe80 collection
2019-07-26 13:50:59 -04:00
a251a538b0
Improve SMM discovery
...
SMM discovery behavior has seemingly gotten more picky with time.
First switch to an IPMI-free if the user has custom password. The
web based approach is much less problematic than SMM IPMI stack in
this context.
If user specifies they want to use default credentials, we have
no choice but to use IPMI. Omit things and shuffle order of operations
to mitigate problems. It isn't perfect, but it does work eventually.
2019-07-26 09:25:19 -04:00
480a747dcf
Merge branch 'master' of github.com:jjohnson42/confluent
2019-07-25 13:10:08 -04:00
af025f7304
Present log name when provided in nodeeventlog
...
Some managers combine logs, allow disambiguation through including in output.
2019-07-25 13:09:52 -04:00
21edd82177
Extend generic catches in redfish/ipmi
...
Have it provide more detailed error data at
a glance to short out some debug requirements.
2019-07-25 09:28:55 -04:00
8641885f86
Fix handling of socket error with neighbor
...
If a system is half up, a different sort of timeout is given.
Handle this and also preserve the original exception better
if not one of these two.
2019-07-25 08:52:47 -04:00
46e2f53018
Always use GCM on encrypt
...
Continue to support read using the old scheme, but even when
an integrity key is available, only use it to aid in decrypting
classic format, and always write in new format.
2019-07-17 08:51:06 -04:00
cf51928b3d
Implement GCM and close gap in the HMAC
...
When generating key material from scratch, skip HMAC and
activate GCM mode.
When using existing CBC/HMAC keys, start covering the IV value
in the HMAC. For compatibility, HMAC validity is checked with
and without IV.
2019-07-16 18:32:23 -04:00
151ba2e567
Add error messages to nodeattrib clear
...
nodeattrib -c was not reporting useful error information.
2019-07-15 13:28:09 -04:00
bc87077397
Fix error handling and consistency in networking
...
by-port specification was inconsistent and unhelpful in error between macmap and lldp.
2019-07-15 11:07:59 -04:00
19c2963cf9
Fix reassign with SMM
...
SMM validation assumes an earlier connection, fix so that it will accept the certificate
if no certificate expected yet.
2019-07-11 15:55:20 -04:00
6ad1ce4df5
Back off concurrent retrieval.
...
Some BMCs are incapable of handling concurrent requests.
This is a blow particularly to high latency management given
Redfish's tendency to require a lot of resource fetches, but
we don't have a particularly discoverable strategy for knowing
in advance whether an implementation is up for some optimization.
2019-07-11 11:41:42 -04:00
c53264872a
Fix scenario with undefined passlength
...
If passwordcomplexity were requested without a passwordlength,
things would be a problem.
2019-07-11 10:53:43 -04:00
d9f2c0b266
Correct mistake in setting names
2019-07-11 10:40:49 -04:00
d528d45820
Add configuration to opt into password policies.
2019-07-11 10:19:46 -04:00
4eeac8d71a
Explore password evaluation as an option.
...
Password rules may be relevant to some scenarios. In such a case, this
can provide guidance if the BMC does not have such a facility or
alternatively provide friendlier warnings than the BMC provides
around shortcomings of the password.
2019-07-10 15:32:47 -04:00
bfd0de1a4a
Add expiration to more places
2019-07-09 13:26:48 -04:00
a787ac62c3
Add expiration data from ipmi plugin
...
When pyghmi provides the information, enrich the return
data.
2019-07-09 12:48:56 -04:00
fd9b4a8650
Add support for expiration data, when available
2019-07-09 10:55:33 -04:00
0ad0c626c2
Restore password policy set to nodediscover
...
The shift away from IPMI had omitted the password policy set.
Amend the function and restore it to the sequence of events.
2019-07-08 16:25:07 -04:00
fbc4fc6846
Make unexpected error more specific
...
Often a usable summary message is obfuscated. Assume the subject line
is safe to relay, but continue to do a more verbose trace.
2019-07-08 14:28:56 -04:00
3efc153615
Improve conversion reliability
...
It was frequent that a token expiration would impact attempt to convert
an account. Suppress the token based authentication to more reliably
have a fresh login.
Additionally, mitigate chance of exhausting user login limit.
Finally, switch to a generated password for the temporary account. Should something go awry
between deleting the third-party account and recreating it, this
means the system will have to be reset through OS or F1 menu. However this is better
than the risk of a well known backdoor account being inadvertently
created.
2019-07-03 11:39:36 -04:00
b7ff093e48
Fix ubuntu package install location
2019-07-02 14:42:45 -04:00
7275e98039
Remove IPMI specific parameters to user
...
Users cannot have these settings in redfish
2019-07-01 11:23:28 -04:00
2b0c50dc23
Refresh connection parameters on retry
...
If the parameters changing cause a login failure,
take the opportunity to refresh that information to work
in the midst of a rediscover, for example.
2019-07-01 09:15:01 -04:00
54439d5f18
Fix cause of former 'login process died'
...
If a session died without calling logged, the confluent plugin
instance would be orphaned. Detect this situation to trigger a
retry.
2019-07-01 09:05:08 -04:00
65b4cbe8cc
Revised fix for redfish name missing case
2019-06-28 16:02:19 -04:00
c8931ae6e7
Revert "Carry fix for null names to redfish"
...
This reverts commit 8bbeeafa49
2019-06-28 16:01:26 -04:00
083f5c8654
Add python-dateutil rpm dependency
2019-06-28 15:41:17 -04:00
8bbeeafa49
Carry fix for null names to redfish
2019-06-28 15:14:59 -04:00
422f210f74
Handle adapters with null names
...
Under some situations, null names are given
for adapters, apply generic treatment to such
devices.
2019-06-28 15:13:56 -04:00
2e6029bd2c
Add a location.height attribute
...
This permits user to specify height for either unsupported systems
or to speed up the rackview drawing.
2019-06-28 09:30:53 -04:00
81c0adbbe3
More python 3 compatibility fixes
...
Improve more commands and modules to parse and execute under python 3.
2019-06-28 08:51:57 -04:00
6d5f0cdb16
Make TCP_FASTOPEN opportunistic
...
Certain Linux-like but not Linux environments fail
at this.
2019-06-27 15:36:27 -04:00
c633286019
Add missing dateutil dependency to apt
2019-06-27 15:31:00 -04:00
ffe9606de1
Auto-repair 'login process died' condition
...
The cause is still unknown, but we should be able to at least
repair automatically.
2019-06-24 16:34:56 -04:00
3501b3c347
Add state info to all licenses
...
The all resource was not retrieving the licenses.
2019-06-21 15:52:24 -04:00
e55314d759
Add display of inactive licenses
...
Inactive licenses are also an issue.
2019-06-21 10:17:52 -04:00
27410a9b6b
Fix discover of XCC
...
Incorrect module path was indicated.
2019-06-20 10:56:09 -04:00
2db01746d5
Support deletion of licenses from XCC
2019-06-19 16:35:24 -04:00
208be0beef
Implement nodelicense save
...
Add ability to save licenses from
the XCC.
2019-06-19 15:43:45 -04:00
Jarrod Johnson
Jarrod Johnson