About the usage of ipmi user management

Lei YU mine260309 at gmail.com
Wed Jan 9 14:24:17 AEDT 2019


With Richard and Tom's help, we are clear about the root cause of the issue:

* In `phosphor-ipmi-host_git.bb`, it installs the root into `ipmi` group
* When BMC is running in a clean environment, it just works
* If BMC is updated from an old version, the `/etc/group` is preserved during
   code update as it is in `/run/initramfs/whitelist`, so the new ipmi group
   does not work at all, the root only has `ssh` group.
* To make it work, we could do a factory reset, which makes the BMC to run
   from a clean environment.
   After factory reset, I confirm that the net ipmi works well, and
the root has below groups:

       root web redfish ipmi priv-admin

   Which probably means redfish may meet similar issue as well.


On Tue, Jan 8, 2019 at 9:47 AM Lei YU <mine260309 at gmail.com> wrote:
>
> On Tue, Jan 8, 2019 at 12:08 AM Thomaiyar, Richard Marian
> <richard.marian.thomaiyar at linux.intel.com> wrote:
> >
> > Hi Lei Yu
> >
> > There was an issue, when libuser commands was decoupled (which was
> > caused by another commit not merged). Same has been merged on Jan 5 US
> > time https://gerrit.openbmc-project.xyz/#/c/openbmc/meta-phosphor/+/16934/
> >
> > Can you please confirm, whether you have tested it after this. When i
> > tested the same is working fine. Please check.
> >
> > if your openbmc SHA is after 4b04e1fff12efc02ef234b37293958f7fc1c11f5
> > then it should include the fix
> > (https://github.com/openbmc/openbmc/commit/4b04e1fff12efc02ef234b37293958f7fc1c11f5)
>
> I was on yesterday's openbmc master (dc21ed5), so it should already
> have the patch.


More information about the openbmc mailing list