MAAS sets an invalid choice for the IPMI cipher suite ID during commissioning
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Triaged
|
Medium
|
Unassigned |
Bug Description
MAAS: 3.4.2
I am enlisting and commissioning a Lenovo SD550 V3 server in our MAAS. I powered the machine on and it completed enlistment and appeared in the UI as a New server.
However, power status was marked as an Error. On further investigation, the Cipher Suite ID in the Configuration for that machine was set to 3. To see if that had anything to do with the power control issues, I set it to 17 and saved the config change. After that, MAAS was able to successfully probe power status and was able to control the power to turn the machine on when I selected "Commission" from the action menu.
Commissioning was successful as well, however, after commissioning, power status checking was again failing. I went back to the machines Configuration page and noted that the Cipher Suite ID had been changed back to 3 again. So once more, changing that to 17 and saving it allowed MAAS to successfully probe power on this machine.
As a check, I then recommissioned the machine. MAAS again was able to power the machine on, which successfully completed commissioning a second time. And just as before, MAAS changed the Cipher Suite ID back to 3, causing power control to fail.
Ref: Yakkey in the Cert Lab
Hi Jeff, 01-bmc- config commissioning script, because the default value for the `ipmi_cipher_ suite_id` is set to 3 (source /src/metadatase rver/builtin_ scripts/ commissioning_ scripts/ bmc_config. py).
I think that the problem should be related to the 30-maas-
To solve this you can verify and change the default value by doing the following: auto_ipmi_ cipher_ suite_id auto_ipmi_ cipher_ suite_id value=17 auto_ipmi_ cipher_ suite_id
```
# this should output 3
maas $PROFILE maas get-config name=maas_
# change the value to 17
maas $PROFILE maas set-config name=maas_
# verify the change
maas $PROFILE maas get-config name=maas_
```