Bug #33339
Limit IPMI admin password to 20 characters
Description
A better description is that the GUI takes a longer password than 20 characters for IPMI, and seems to set it successfully, but I can't log in with that long password.
It's possible that the GUI was truncating the PW, but since it's dots and the box is full, it's hard to see that it's just blocking additional characters.
Recovering the IPMI was painful.
Related issues
History
#1
Updated by Bill O'Hanlon almost 3 years ago
Bill O'Hanlon wrote:
A better description is that the GUI takes a longer password than 20 characters for IPMI, and seems to set it successfully, but I can't log in with that long password.
It's possible that the GUI was truncating the PW, but since it's displayed as dots and the box is full, it's hard to see if it's just blocking additional characters.
Recovering the IPMI was painful.
#2
Updated by Eric Loewenthal almost 3 years ago
I vaguely remember the ASpeed 2400 on my X10SLM+-F only working with passwords up to 19 characters. Cannot confirm the value, nor did I ever find documentation about that. And that was in the IPMI webGUI, which clearly doesn't validate this, either.
If nobody knows of an IPMI spec that defines this, I'd recommend adding a warning to the GUI and to the manual. If needed, we can catalog experimental results on different motherboards on the forum.
#3
Updated by Joshua Sirrine almost 3 years ago
I could have sworn we went around with this problem before. While the issue isn't fixed (and there may be good reasons for this that I don't know), at the time the general concensus was that the WebGUI was doing something nasty(TM) with long passwords or certain characters and needed to be worked out or have the WebGUI not allow those characters to be used.
IIRC the customer that first had this problem resolved the issue by logging into the IPMI controller directly and setting the password instead of using the TrueNAS WebGUI. So that may be a hint.
This knowledge is several years old, so it may be wrong, etc. I'd use this info as a starting point for identifying the issue, but I'd definitely validate what I've written here. ;)
#4
Updated by Ben Gadd almost 3 years ago
Investigate what are our (iX) password limitations and/or requirements
Note to Dev: Followup with Bill about this ticket
#5
Updated by Dru Lavigne almost 3 years ago
- Assignee changed from Release Council to Anonymous
- Target version changed from Backlog to 11.3
Erin: please have the UI throw an error when the user hits the allowed char limit. Bill has some suggestions on what that char limit should be (as it varies by BMC).
#6 Updated by Anonymous almost 3 years ago
- Status changed from Unscreened to Screened
#7 Updated by Anonymous almost 3 years ago
- Status changed from Screened to Not Started
#8
Updated by Dru Lavigne over 2 years ago
- Subject changed from Current GUI allows long (>20) character password to be set on IPMI admin user to Limit IPMI admin password to 20 characters
- Target version changed from 11.3 to 11.2-RC1
#10 Updated by Anonymous over 2 years ago
- Assignee changed from Anonymous to Vaibhav Chauhan
#11
Updated by Dennis Mullen over 2 years ago
- Assignee changed from Vaibhav Chauhan to Dennis Mullen
#12
Updated by Dennis Mullen over 2 years ago
- Status changed from Not Started to In Progress
#13
Updated by Dennis Mullen over 2 years ago
#14
Updated by Lola Yang over 2 years ago
- Status changed from In Progress to Ready for Testing
- Needs Merging changed from Yes to No
#15
Updated by Jeff Ervin over 2 years ago
- File Screenshot-2018-9-26 FreeNAS - 10 231 4 231(2).png Screenshot-2018-9-26 FreeNAS - 10 231 4 231(2).png added
- Status changed from Ready for Testing to Passed Testing
- Needs QA changed from Yes to No
Test Passed FreeNAS-11.2-MASTER-201809260853
#16
Updated by Aaron St. John over 2 years ago
- Needs Doc changed from Yes to No
(docs) angulargui PR: https://github.com/freenas/freenas-docs/pull/377
#17
Updated by Dru Lavigne over 2 years ago
- Needs Merging changed from No to Yes
#18
Updated by Dru Lavigne over 2 years ago
- Related to Bug #48867: Limit IPMI admin password to 20 characters in legacy UI added
#19
Updated by Dru Lavigne over 2 years ago
- Status changed from Passed Testing to Done
- Needs Merging changed from Yes to No
#20
Updated by Dru Lavigne over 2 years ago
- Related to Bug #49585: Limit IPMI admin password to 20 characters in middleware added