IPMI user account with LDAP/Active Directory

Tom Joseph tomjose at linux.vnet.ibm.com
Tue Jul 10 05:14:13 AEST 2018


Hello,

I came across the user guide of MegaRAC, SuperMicro etc mentioning about 
the LDAP/Active directory settings.
(Example: 
https://argonsys.com/learn-microsoft-cloud/articles/supermicro-ipmi-active-directory-integration/)

As IPMI requires clear text password my understanding is that LDAP/AD is 
not suitable for IPMI user account management.
Is the purpose of LDAP/AD to support authentication from UI along with 
IPMI user accounts on the BMC?
Also LDAP/AD cannot be used for IPMI session setup as passwords are 
stored as one-way hash and cannot be retrieved.

Any thoughts?

Regards,
Tom



More information about the openbmc mailing list