IT29004: 'ADMIN' USER IS ENABLED BY DEFAULT FOR IPMI ACCESS

Fix packs for DataPower Gateway version 2018.4
Fix packs for DataPower Gateway version 7.6

APAR status

• Closed as program error.

Error description

• The user observed being able to connect via IPMI tools when
  using the following credentials which are not defined as an
  ipmi-user:
  username: admin
  password: admin
  The IPMI LAN channel does not have the admin user in the list
  of allowed users...
  idg# show ipmi-lan-channel
  ipmi-lan-channel: mgt0 [up]
  ----------------------
  admin-state enabled
  summary "IPMI on mgt0"
  maximum-channel-privilege-level operator
  sol-enabled on
  sol-required-user-privilege-level operator
  allowed-user test_ipmi operator on 0
  ip address 192.168.1.12/24
  ip default-gateway 192.168.1.1
  .
  mqa(config)# show ipmi-user
  .
  ipmi-user: test_ipmi [up]
  ---------------------
  admin-state enabled
  summary "Admin user for IPMI"
  user-id 3
  

Local fix

Problem summary

• DataPower IPMI user configuring IPMI Lan Channel might see the
  default user is enabled.
  

Problem conclusion

• Fixed is available in 7.6.0.15 and 2018.4.1.6
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R760 PSY

     UP

• R770 PSY

     UP