RHBA-2009:1629 - Bug Fix Advisory

Topic

Updated OpenIPMI packages that resolve several issues are now available for Red
Hat Enterprise Linux 5.

[Updated 7 April 2010]
These packages have also been made available in the following child channels:
Red Hat Enterprise Linux Desktop Client 5 for x86, and Red Hat Desktop
Workstation Client 5 for x86. No changes have been made to the packages.

Description

OpenIPMI (Intelligent Platform Management Interface) provides command line
tools and utilities to access platform information, allowing system
administrators to monitor system health and manage systems.

This update addresses the following problem:

• the ipmitool man page did not contain descriptions of the "hpm" and

"fwum" commands. In addition, the man page did not document the "noguard"
parameter of the "sol set" command. These commands and parameters are
properly described in the updated ipmitool man page. (BZ#514215, BZ#513609)

• the ipmievd init script did not properly implement the "condrestart"

action. This could result in the ipmievd daemon not being restarted after a
package update. The condrestart action in the ipmievd init script is fixed
in this update. (BZ#532445)

• on some IPMI-enabled hardware, especially hardware with an on-board IPMI

watchdog supported by the i6300esb driver or an Intel TCO Watchdog Timer
device supported by the iTCO_wdt driver, the /dev/watchdog device is
created directly by the kernel during boot. If the ipmi service with
enabled watchdog was then started, the init script did not recognize the
existing watchdog device and tried to instantiate new one. This resulted in
an error which was not reported to the user. The updated ipmi init script
now returns a "/dev/watchdog already exists [FAILED]" message in this
circumstance. (BZ#514678)

• some IPMI-enabled hardware uses UDP ports 623 (ASF Remote Management and

Control Protocol) and 664 (ASF Secure Remote Management and Control
Protocol), which can conflict with other traffic on these ports. The
previous OpenIPMI release added a configuration file -- /etc/xinetd.d/rmcp

• - for a dummy rmcp service and introduced an xinetd service dependency to

bind UDP ports 623 and 664 and prevent other services from using them.

Because the xinetd service is started by default, the update resulted in a
new xinetd daemon running on systems after OpenIPMI was updated. This
daemon is not necessary for OpenIPMI operation.

This update removes the dependency on xinetd but leaves the dummy rmcp
service configuration file in place. (BZ#522524)

All OpenIPMI users are advised to upgrade to these updated packages. If the
previous OpenIPMI update started an unnecessary xinetd service, stopping
and removing this service is also recommended.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 513609 - ipmitool wrong commandline parsing
• BZ - 514215 - ipmitool manpage omission
• BZ - 514678 - ipmi_watchdog driver and ipmi init script broken on systems with certain types of watchdog hardware
• BZ - 522524 - [RHEL5.4] OpenIPMI update results in xinetd installed and running
• BZ - 532445 - ipmievd init script's condrestart doesn't work

CVEs

(none)

References

(none)