PDA

View Full Version : ServerComplete.com DELL IPMI access troubles



Fli
07-26-2017, 10:30 AM
This is complicated.

You have to access client area and there download

A) OpenVPN client GUI software with config file which will connect you to the servercomplete server. You have to first install this software. It is claimed to contains malicious code: https://www.virustotal.com/en/file/3eacf52332ac2d10a02247adbfa46eb9d491890ab1e1c830d8 9b39eb26b05b62/analysis/1492980864/

CrowdStrike Falcon (ML) malicious_confidence_86% (W)
Sophos ML trojan.win32.svcminer.a
TrendMicro-HouseCall Suspicious_GEN.F47V0422

After installation you have to run OpenVPN GUI application and connect to the SC server.

.config file

dev tun
persist-tun persist-key cipher AES-256-CBC auth SHA1 tls-client client resolv-retry infinite remote vpn.ipmi.jax.ndnx.net 1194 udp auth-user-pass ns-cert-type server comp-lzo adaptive

B) Advanced/Custom tab will allow you to download config file alone.
So you can add it to your OpenVPN GUI /config/ folder and after OpenVPN GUI restart, try to connect.

OVPN connection may fail:
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

I do not know why, but obvious things like changing internet connection, restarting, other computer may work.



Then you can access IPMI login page mentioned in the ServerComplete IPMI section:

URL: http://********.ipmi.jax.ndnx.net
Username: srv********
Password: ********

Then you can receive error :D


Login failed. User does not have 'Login to Dell BMC' privilege.

Then you can submit support ticket and WAIT

Finally you can login IPMI where you click KVM section and download two .jnlp Java files. (One needs to have Java.com installed.)
Launch file and receive error:

Java shows: Unable to launch the application.

or

java.net.ConnectException: Connection timed out: connect

(you may be on unstable mobile connection) or need to reconnect IPMI and re-download data?

Another error that can appear is about Untrusted application, self signed certificate. One need to access Java configuration and whitelist:
http://*****somethinghere*****.ipmi.jax.ndnx.net
http://*****somethinghere*****.ipmi.jax.ndnx.net:80
https://*****somethinghere*****.ipmi.jax.ndnx.net
http://iphere?

when opening data.jnlp, it can return some other error. So after re-downloading data.jnlp and possibly re-loging into IPMI, then the data.jnlp allowed to select local .iso image, but the upload was a few kilobits per second and after a few seconds 0. Reset USB button allowed to transfer few kilobytes and once again zero. Useless.

i wasted alot of time thanks to ServerComplete OpenVPN setup and thanks to old DELL IPMI console with Java.

onkyo
11-02-2017, 04:16 PM
i spent about 3 hrs getting it to work for me, then when i did reach the remote console it was so slow i couldnt do anything, the page its self was almost unusable becuase it was so buggy/slow

Fli
11-05-2017, 03:13 PM
SC did not wanted to agree that the problem with the IPMI (including upload speed) is their problem, Brandon said many clients using it without problem. He offered IPKVM as an alternative, so i assume if someone have problem with IPMI, he can maybe try contact SC and ask for IPKVM.