How to configure the privilege level of an IPMI user in fence_ipmilan in a RHEL 5 or 6 cluster

Solution Verified - Updated -

Issue

  • The fence_ipmilan man page indicates how to do this when running the fence agent manually (using the -L command line option), but does not explain the parameter name to include in the cluster.conf fence device definition.
  • Fencing using fence_ipmilan fails with the following error:

    Jun 18 09:58:21 node1 fenced[68777]: fence node2 dev 0.0 agent fence_ipmilan result: error from agent
    

    But manual fencing using the following command works:

    fence_ipmilan -L operator -a "172.20.128.54" -l "rhcluster" -P -S "/usr/local/bin/hide_fence_passwd.sh" -o reboot -t 10 -T 4 -v
    
  • The tool fence_ipmilan has no privilege level switch and the iLO user in fence_ilo has only "Virtual Power and Reset" privileges. Is there a workaround for this?
  • Unable to set iLO3 privilige level with fence_ipmilan.
  • Fencing is not working on Redhat two node cluster for the server which is having HP ILO 4:
[root@node1 ~]#  fence_ilo4 -a X.X.X.X -P -l user -p xxxxxx -o status
Getting status of IPMI:X.X.X.X...Chassis power = Unknown
Failed

Environment

  • Red Hat Enterprise Linux (RHEL) 5 or 6 with the High Availability Add On
  • Red Hat Enterprise Virtualization Hypervisor (RHEV-H) 5
  • Red Hat Enterprise Virtualization Hypervisor (RHEV-H) 6
  • One or more hosts configured to use fence_ipmilan as the fence agent
    • The fence device is configured with a user having a privilege level other than ADMIN

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In