User Management#

Use the following command-line instructions to manage users for your BMC.

Commands for User Management#

Number

Function

Command

1

List all users

ipmitool user list [<channel number>]

Example:

ipmitool user list 1

2

User creation

ipmitool user set name <user id> <user name>

Example:

ipmitool user set name 2 ADMIN

3

Set user password

ipmitool user set password <user id> <password>

Example:

ipmitool user set password 2 ADMIN123

Password policy:

  • Minimum length: 13

  • Minimum upper-case characters: 1

  • Minimum lower-case characters: 1

  • Minimum digits: 1

NOTE: Root account locks after four consecutive failed attempts and automatically unlocks after 10 minutes.

4

Enable user

ipmitool user enable <user id>

Example:

ipmitool user enable 2

5

Disable user

ipmitool user disable <user id>

Example:

ipmitool user disable 2

6

Set user privilege

ipmitool user priv <user id> <privilege level(1-4)> [<channel number>]

Where “privilege level” means one of the following:

  • 1 – callback level

  • 2 – user level

  • 3 – operator level

  • 4 – administrator level

Example:

ipmitool user priv 2 0x3 1

7

Enable remote IPMI command functionality for user

ipmitool channel setaccess [<channel number>] <user id> ipmi = on\|off

Example:

ipmitool channel setaccess 1 2 ipmi=on

8

Lanplus commands to execute IPMI commands remotely for users with admin permissions

ipmitool -C 17 -I lanplus -U <user> -P <password> -H <bmc_ip_address> <ipmi command>

Example:

ipmitool -C 17 -I lanplus -U root -P 0penBmc -H 192.168.1.110 user list 1

10

Delete user

ipmitool user set name <user id> ""

Example:

ipmitool user set name 2 ""

Factory Reset#

The BMC factory reset helps to reset the BMC login password. If you do a factory reset, you reset all previous user-level configurations, and reload the default configurations.

Use one of the following methods to do a factory reset:

  • Use the the BMC web user interface.

    Go to Operations -> Factory reset -> Reset BMC and server settings.

  • Use the BMC console.

    root@mgx-3809:~# ipmitool raw 0x32 0x66
    
  • Use Redfish.

    export bmc=<BMC IP>
    export token=`curl -k -H "Content-Type: application/json" -X POST https://${bmc}/login -d '{"username" : "root", "password" : "<BMC Password>"}' | grep token | awk '{print $2;}' | tr -d '"'`
    curl -k -H "X-Auth-Token:$token"https://${bmc}/redfish/v1/Managers/IGX_BMC_0/Actions/Manager.ResetToDefaults -d '{"ResetToDefaultsType": "ResetAll"}' -X POST