Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

iDRAC7 support? #67

Open
NetwarSystem opened this issue Nov 23, 2023 · 1 comment
Open

iDRAC7 support? #67

NetwarSystem opened this issue Nov 23, 2023 · 1 comment

Comments

@NetwarSystem
Copy link

I have a trio of old Dell rack mounts in a remote location that I am trying to decommission. I need to get data off them and wipe some drives once that is done. I have a couple folders from when Ubuntu 20.04 was current that contain some jar files and a config I used to access the systems. I haven't touched the machines with iDRAC in a couple years and I'm finding this stuff doesn't work on Ubuntu 22.04.

This Docker image is just perfect for the R610, but I've got two R420s with iDRAC7 and it's been absolutely awful trying to regain access. I think "A dumpster fire that someone tried to extinguish using a JDAM strike" best describes the state of this problem online. There are a dozen vaguely plausible solutions out there, all of which presume the reader has some underlying knowledge that I seem to lack. I've spent maybe forty hours with Linux, Mac, and Windows, trying different things. It complains about an outdated cipher but there are a wide variety of places one can adjust this. I got an iDRAC7 manual, found a list of ciphers in the back, tried some of the more likely ones in a variety of places without any luck. I fired up Wireshark and tried again, also no luck.

Is there a simple way to adjust this Docker image to include the needed .jar files for iDRAC7? I do see in an older support request here a dismissal of this need - because the iDRAC7 has native html5? I'm not precisely sure what this means, but I've got web access to these iDRAC7 and there's no method to access the console that works. The system spits out a JNLP file, I've loaded the recommended icedtea-netx, and it won't run the contents.

So ... the whole world seems to be wrestling with this problem and I KNOW this Docker image is very, very close to a workable solution. Anyone have a quick hint on how to solve this access problem?

@NetwarSystem
Copy link
Author

Grousing here stimulated my one remaining troubleshooting brain cell. This script will permit Linux users to access an iDRAC7.

#!/bin/bash
# This script will let you access the console of a Dell iDRAC7 
# using the latest OpenJDK 11 runtime.
#
# First, you need to modify /etc/ssl/openssl.cnf
# reducing the security level from 2 to 1. This
# allows wget to pull the jar file.
# CipherString = DEFAULT:@SECLEVEL=1
#
# Second, you need to enable a deprecated cipher for Java in:
# /etc/java-11-openjdk/security/java.security
#
# Below is the default and you need to remove 3DES_EDE_CBC from the list:
#
# jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \
#    DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL, \
#    include jdk.disabled.namedCurves

if [ $# -ne 3 ];
    then echo "Usage: idrac7console <IP> <user> <password>"
    exit
fi

if ! [ -f "avctKVM.jar" ]; then
       wget --no-check-certificate https://$1:443/software/avctKVM.jar
fi

/usr/lib/jvm/java-11-openjdk-amd64/bin/java \
    -cp avctKVM.jar com.avocent.idrac.kvm.Main \
    ip=$1 kmport=5900 vport=5900 apcp=1 version=2 \
    vmprivilege=true helpurl=https://$1:443/help/contents.html \
    user=$2 passwd=$3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant