<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=big5">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Hi Vernon,</span><br>
</div>
<div class="elementToProof"><br>
</div>
<div class="flex-col gap-1 md:gap-3">
<div class="flex flex-grow flex-col max-w-full gap-3 gizmo:gap-0">
<div data-message-author-role="assistant" data-message-id="e8626ac2-e048-41ef-9c92-fadadff56cae" class="min-h-[20px] text-message peer flex flex-col items-start gap-3 whitespace-pre-wrap break-words peer-[.text-message]:mt-5 overflow-x-auto">
<div class="markdown prose w-full break-words dark:prose-invert dark">
<p class="ContentPasted2 elementToProof"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">We recently</span><code class="!whitespace-pre hljs language-vbnet ContentPasted1"><span style="font-size: 10pt; font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
</span></code><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">conducted some tests on phosphor-ipmi-host and found that the user password test command doesn't</span><span class="HwtZe" lang="en"><span class="jCAhz ChMk0b"><span class="ryNqvb" style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
appear to be compliant with the IPMI specification.</span></span></span></p>
<p class="ContentPasted2 elementToProof"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">We used a 20-byte password testing command to validate a 16-byte password, and it passed the test. However, according to the IPMI specification,
I think the above test combination should return a failure.(Please refer to IPMI spec 22.30-Set User Password Command, page 313)
</span><br>
</p>
<p class="ContentPasted2 elementToProof"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Here is the testing procedure:</span></p>
<ol data-listchain="__List_Chain_151">
<li class="ContentPasted2 elementToProof ContentPasted6" style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
<span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Change the user password with a 16-byte flag.</span><br>
<div><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">root@evb:~#</span><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);"><b> ipmitool user set password 5 Passw0rd 16</b></span><b><br>
</b></div>
<div class="ContentPasted6"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Set User Password command successful (user 5)</span></div>
<br>
</li><li class="ContentPasted2 elementToProof ContentPasted4" style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
<div><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Use a 16-byte testing command to validate the correct password: Pass
</span><br>
</div>
<div><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">root@evb:~#</span><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);"><b> ipmitool user test 5 16 Passw0rd </b></span><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
</span><br class="ContentPasted4">
</div>
<div><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Success</span></div>
<div class="ContentPasted2 elementToProof ContentPasted4" style=""><br>
</div>
</li><li class="ContentPasted2 elementToProof ContentPasted5" style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">
<div><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Use a 20-byte testing command to validate the correct password: Pass <== I think this should be a Fail</span><br>
</div>
<span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">root@gms:~#
</span><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);"><b>ipmitool user test 5 20 Passw0rd</b></span>
<div class="ContentPasted5"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Success</span></div>
</li></ol>
<p class="ContentPasted2 elementToProof"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Could you please confirm if my understanding is correct? </span></p>
<div class="ContentPasted2 elementToProof" style="margin-top: 0px; margin-bottom: 0px;">
<span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Additionally, any insights or suggestions on this matter would be greatly appreciated.</span><br>
</div>
<p class="ContentPasted2 elementToProof"><span style="font-family: "Times New Roman", Times, serif; color: rgb(0, 0, 0);">Thank you very much.</span></p>
</div>
</div>
</div>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<div><span><br>
</span></div>
</div>
<div class="elementToProof">
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family: Times New Roman, serif; color: black;" lang="en-US"><br>
</span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family: Times New Roman, serif; color: black;" lang="en-US">Best Regards</span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family:Times New Roman,serif" lang="en-US"> </span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family:Times New Roman,serif" lang="en-US">Quanta Computer Inc.</span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family:Times New Roman,serif" lang="en-US"><span lang="en"><span><span class="ContentPasted0">software engineer</span></span></span><br>
</span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family: Times New Roman, serif; color: black;" lang="en-US">Jerry Wan</span></p>
<p style="font-size:12pt; font-family:Calibri,sans-serif; margin:0"><span style="font-family: Times New Roman, serif; color: black;" lang="en-US"><br>
</span></p>
<br>
</div>
</div>
</div>
</div>
</body>
</html>