Users Guide

Set User Password Command
● Request data byte 1—User ID. For IPMI v20, the BMC supports 20-byte passwords (keys) for all user IDs that have
configurable passwords. The BMC maintains an internal tag indicating if the password is set as a 16-byte or 20-byte
password.
Use a 16-byte password in algorithms that require a 20-byte password. The 16-byte password is padded with 0s to create
20-bytes.
If an attempt is made to test a password that is stored as a 20-byte password as a 16-byte password, and vice versa, the
test password operation returns a test failed error completion code.
You cannot use a password stored as a 20-byte password to establish an IPMI v1.5 session. You must set the password as a
16-byte password to configure the same password for both IPMI v20 and IPMI v1.5 access. The password is padded with 0s
as necessary.
Use the test password operation to determine if a password is stored as 16-bytes or 20-bytes.
● Request data byte 2—
○ [7:2] Reserved
○ [1:0] Operation
￭ 00b-disable user
￭ 01b-enable user-10b-set password
￭ 11b-test password. This compares the password data give in the request with the presently stored password and
returns an OK completion code if it matches. Otherwise, an error completion code returns.
● Request data byte 3:18—For 16-byte passwords. Password data. This is a fixed-length required filed used for setting and
testing password operations. If the user enters the password as an ASCII string, it must be null (00h) terminated 00h padded
if the string is shorter than 16 bytes. This field is not needed for the disable user or enable user operation. If the
field is present, the BMC ignores the data.
● Request data byte 3:22—For 20-byte passwords. This is a fixed-length required filed used for setting and testing password
operations. If the user enters the password as an ASCII string, it must be null (00h) terminated 00h padded if the string is
shorter than 20 bytes. This field is not needed for the disable user or enable user operation. If the field is present,
the BMC ignores the data.
● Response data byte 1—Completion code. Generic plus the following command-specific completion codes:
○ 80h-mandatory password test failed. Password size is correct but the password data does not match the stored value.
○ 81h-mandatory password test failed. Wrong password size.
Firewall
To set a firewall, use the set firewall configuration command. Use parameters 0–3 to add the iptables rules and 4–7
to remove the iptables rules.
● NetFN—0x32
● Command—0x76
● Request data Byte 1—parameter selector
● Request data Byte 2—State selector
● Request data Byte 3:N—Configuration parameter data
● Response data Byte 1—Completion code
○ 80h—Parameter not supported
○ 81h—Invalid time (start/stop time)
○ 82h—Attempt to write read-only parameter
○ 83h—Attempt to access HTTP Port 80
To set the firewall configuration state, use the following:
Table 3. Firewall set parameters
Type specific param # Parameter data
To set the command to DROP 00
Parameter to drop packets. Parameter
0–3 uses this state to add the rules
56 Configuration methods