IPMI user account with LDAP/Active Directory

IPMI user account with LDAP/Active Directory

[Tom Joseph]

Hello,

I came across the user guide of MegaRAC, SuperMicro etc mentioning about 
the LDAP/Active directory settings.
(Example: 
https://argonsys.com/learn-microsoft-cloud/articles/supermicro-ipmi-active-directory-integration/)

As IPMI requires clear text password my understanding is that LDAP/AD is 
not suitable for IPMI user account management.
Is the purpose of LDAP/AD to support authentication from UI along with 
IPMI user accounts on the BMC?
Also LDAP/AD cannot be used for IPMI session setup as passwords are 
stored as one-way hash and cannot be retrieved.

Any thoughts?

Regards,
Tom

Re: IPMI user account with LDAP/Active Directory

[Ratan Gupta]

[-- Attachment #1: Type: text/plain, Size: 1242 bytes --]

Hi Tom.

 > As IPMI requires clear text password my understanding is that LDAP/AD 
is not suitable for IPMI user account management.
Is the purpose of LDAP/AD to support authentication from UI along with 
IPMI user accounts on the BMC?
Also LDAP/AD cannot be used for IPMI session setup as passwords are 
stored as one-way hash and cannot be retrieved.

Seems ldap gets the way through which we can access the password.

e.g.

|sudo ldapsearch -H ldapi:// -LLL -Q -Y EXTERNAL -b "cn=config" 
"(olcRootDN=*)" dn olcRootDN olcRootPW Regards Ratan Gupta |



On Tuesday 10 July 2018 12:44 AM, Tom Joseph wrote:
> Hello,
>
> I came across the user guide of MegaRAC, SuperMicro etc mentioning 
> about the LDAP/Active directory settings.
> (Example: 
> https://argonsys.com/learn-microsoft-cloud/articles/supermicro-ipmi-active-directory-integration/)
>
> As IPMI requires clear text password my understanding is that LDAP/AD 
> is not suitable for IPMI user account management.
> Is the purpose of LDAP/AD to support authentication from UI along with 
> IPMI user accounts on the BMC?
> Also LDAP/AD cannot be used for IPMI session setup as passwords are 
> stored as one-way hash and cannot be retrieved.
>
> Any thoughts?
>
> Regards,
> Tom
>


[-- Attachment #2: Type: text/html, Size: 2079 bytes --]