How to configure the privilege level of an IPMI user in fence_ipmilan in a RHEL 5 or 6 cluster
Issue
- The fence_ipmilan man page indicates how to do this when running the fence agent manually (using the -L command line option), but does not explain the parameter name to include in the cluster.conf fence device definition.
-
Fencing using fence_ipmilan fails with the following error:
Jun 18 09:58:21 node1 fenced[68777]: fence node2 dev 0.0 agent fence_ipmilan result: error from agent
But manual fencing using the following command works:
fence_ipmilan -L operator -a "172.20.128.54" -l "rhcluster" -P -S "/usr/local/bin/hide_fence_passwd.sh" -o reboot -t 10 -T 4 -v
- The tool
fence_ipmilan
has no privilege level switch and the iLO user infence_ilo
has only "Virtual Power and Reset" privileges. Is there a workaround for this? - Unable to set iLO3 privilige level with
fence_ipmilan
. - Fencing is not working on Redhat two node cluster for the server which is having HP ILO 4:
[root@node1 ~]# fence_ilo4 -a X.X.X.X -P -l user -p xxxxxx -o status
Getting status of IPMI:X.X.X.X...Chassis power = Unknown
Failed
Environment
- Red Hat Enterprise Linux (RHEL) 5 or 6 with the High Availability Add On
- Red Hat Enterprise Virtualization Hypervisor (RHEV-H) 5
- Red Hat Enterprise Virtualization Hypervisor (RHEV-H) 6
- One or more hosts configured to use
fence_ipmilan
as the fence agent- The fence device is configured with a user having a privilege level other than ADMIN
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.