UNSOLVED

spdouts

updated

2 years ago

S

spdouts

1 Rookie

13 Posts

2 Points

0

558

July 15th, 2024 10:59

Racadm questions

Hi Folks

I have an R730 with idrac8 and I'm trying to run some commands to remove local user 3 from the idrac interface. Below are the configuration items I need to update to blank, if someone could please point me in the right direction?

racadm get idrac.Users.3
[Key=idrac.Embedded.1#Users.3]
Enable=Disabled
IpmiLanPrivilege=15
IpmiSerialPrivilege=15
MD5v3Key=[hidden] (I want change this to blank)
!!Password=******** (Write-Only)
Privilege=0x0
SHA1v3Key=[hidden] (I want change this to blank)
SHA256Password=[hidden] (I want change this to blank)
SHA256PasswordSalt=[hidden] (I want change this to blank)
SNMPv3AuthenticationType=SHA
SNMPv3Enable=Disabled
SNMPv3PrivacyType=AES
SolEnable=Disabled
UserName= (I want change this to blank)

  • DELL-Charles R

    Moderator

    4730 Posts

    25476 Points

    0

    0

    Posted July 15th, 2024 15:04

    Hello,

     

    The command to delete an iDRAC user is:

     

    racadm config -g cfgUserAdmin -o cfgUserAdminUserName -i <user_id> ""

     

    Replace <user_id> with the ID of the user you want to delete. You can retrieve the user ID by running the racadm getconfig -g cfgUserAdmin command and looking for the user you want to delete.

     

    After executing the command, the iDRAC user will be deleted. You can verify the deletion by listing the iDRAC users using the racadm getconfig -g cfgUserAdmin command.

    DELL-Charles R

    Social Media and Communities Professional
    Dell Technologies | Enterprise Support Services
    #IWork4Dell

    Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!

  • spdouts

    1 Rookie

    13 Posts

    2 Points

    0

    0

    Posted July 17th, 2024 10:44

    @Dell -Charles R​ Thank you for your assistance.

    I have tried running the two commands below in this order and I have received the below error, can you please further assist me?

    1.

    racadm getconfig -g cfgUserAdmin 

    /admin1-> racadm getconfig -g cfgUserAdmin
    ERROR: The indexed group specified requires -i <index>.


    RAC1168: The RACADM "getconfig" command will be deprecated in a future version of iDRAC firmware. Run the RACADM
    "racadm get" command to retrieve the iDRAC configuration parameters.

    2.

    racadm getconfig -g cfgUserAdmin

    /admin1-> racadm getconfig -g cfgUserAdmin -i
    ERROR: The syntax of the command specified is not correct.


    RAC1168: The RACADM "getconfig" command will be deprecated in a
    future version of iDRAC firmware. Run the RACADM
    "racadm get" command to retrieve the iDRAC configuration parameters.

  • DELL-Charles R

    Moderator

    4730 Posts

    25476 Points

    0

    0

    Posted July 17th, 2024 12:39

    Hello,

     

    Try dropping the "racadm" at the beginning of the command line and use just the remainder:

     

    getconfig -g cfgUserAdmin

     

    config -g cfgUserAdmin -o cfgUserAdminUserName -i <user_id> ""

    You replace <user_id> with the user ID. Be sure to have spaces where the ^ is

    Example:

    -i^3^""

    DELL-Charles R

    Social Media and Communities Professional
    Dell Technologies | Enterprise Support Services
    #IWork4Dell

    Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!

  • spdouts

    1 Rookie

    13 Posts

    2 Points

    0

    0

    Posted July 21st, 2024 05:23

    @DELL-Charles R​ Thank you for your assistance.

    I have tried running the command below and I have received the below error, can you please further assist me?

    racadm>>getconfig -g cfgUserAdmin -i
    racadm getconfig -g cfgUserAdmin -i
    ERROR: The syntax of the command specified is not correct.


    RAC1168: The RACADM "getconfig" command will be deprecated in a
    future version of iDRAC firmware. Run the RACADM
    "racadm get" command to retrieve the iDRAC configuration parameters.
    For more information on the get command, run the RACADM command
    "racadm help get".

  • DELL-Charles R

    Moderator

    4730 Posts

    25476 Points

    0

    0

    Posted July 22nd, 2024 12:06

    Hello spdouts,

     

    Are you SSH in to the DRAC?

    If so I was recommending to try dropping the 'racadm' at the beginning of the command line:

     

    Instead of this:

    racadm getconfig -g cfgUserAdmin

     

    Type:

    getconfig -g cfgUserAdmin

     

     

    Another method you may try is to edit the Server Configuration Profile.

     

    Try export a Server Configuration Profiles (SCP), then blank out all the User attributes for the user you are editing with double empty quote "" and then import it

    Server Configuration Profiles: Reference Guide

    SCP Export page 15

    SCP Import page 21

    https://dell.to/4bVqlr9

     

    You can use LifeCycle controller to export/import SCP from USB Key. Refer below link for details

     

    https://dell.to/3A3pjM8

    Time mark :59 seconds you can Export and Import from there

     

    *Be sure to keep a copy of the original SCP in case you need to restore that.

    DELL-Charles R

    Social Media and Communities Professional
    Dell Technologies | Enterprise Support Services
    #IWork4Dell

    Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!

  • spdouts

    1 Rookie

    13 Posts

    2 Points

    0

    0

    Posted July 23rd, 2024 11:16

    @DELL-Charles R​ 

    Yes I'm in SSH via putty

    Right after I have authenticated, I am in at the prompt as below

    /admin1->

    When I run this command 

    getconfig -g cfgUserAdmin

    I get the below error

    "

    /admin1-> getconfig -g cfgUserAdmin
    cmdstat
            status       : 2
            status_tag   : COMMAND PROCESSING FAILED
            error        : 253
            error_tag    : COMMAND NOT RECOGNIZED
    /admin1->

    "

    Method 2

    I tried the SCP option one however I dont understand what blanking out means with ""

    <Attribute Name="Users.3#UserName"/>
    <!-- <Attribute Name="Users.3#Password">******</Attribute> -->
    <Attribute Name="Users.3#Privilege">0</Attribute>
    <Attribute Name="Users.3#IpmiLanPrivilege">No Access</Attribute>
    <Attribute Name="Users.3#IpmiSerialPrivilege">No Access</Attribute>
    <Attribute Name="Users.3#Enable">Disabled</Attribute>
    <Attribute Name="Users.3#SolEnable">Disabled</Attribute>
    <Attribute Name="Users.3#ProtocolEnable">Disabled</Attribute>
    <Attribute Name="Users.3#AuthenticationProtocol">SHA</Attribute>
    <Attribute Name="Users.3#PrivacyProtocol">AES</Attribute>
    Method 3
    I attempted to export from LifeCycle controller console however the backup and export options are greyed out.

    (edited)

  • DELL-Charles R

    Moderator

    4730 Posts

    25476 Points

    0

    0

    Posted July 23rd, 2024 15:07

    Hello,

     

    Thank you for trying without the racadm. There are some racadm commands that are understood and you can drop the racadm but it seems it is not those commands.

     

    Try these steps and check results:

     

    Run the following command to disable a user:

     

    racadm set iDRAC.Users.<username>.Enable 0

     

    Replace <username> with the username of the user you want to disable.

     

    Press Enter to execute the command.

     

    Verify that the user has been disabled by running the following command:

     

    racadm get iDRAC.Users.<username>.Enable

     

    This command will display the current enable status of the user. If the value is "0", it means the user is disabled.

    DELL-Charles R

    Social Media and Communities Professional
    Dell Technologies | Enterprise Support Services
    #IWork4Dell

    Did I answer your query? Please click on ‘Accept as Solution’. ‘Thumbs up’ the posts you like!

  • spdouts

    1 Rookie

    13 Posts

    2 Points

    0

    0

    Posted July 24th, 2024 08:39

    @DELL-Charles R​ 

    Thank your reply, however I am not trying to disable this account, I have trying to delete.

  • DELL-Erman O

    Moderator

    2984 Posts

    14874 Points

    0

    0

    Posted July 24th, 2024 09:50

    Hi,

    Could you try these below:

    racadm set idrac.users.3.enable 0

    racadm set idrac.users.3.delete 1

    DELL-Erman O

    Social Media and Communities Professional

    Dell Technologies | Enterprise Support Services

    #IWork4Dell

    Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!

  • spdouts

    1 Rookie

    13 Posts

    2 Points

    0

    0

    Posted July 24th, 2024 11:26

    @DELL-Erman O​ 

    Thank you for your response, I have executed both of those commands as suggested

    The 'enable 0' command worked however the 'delete 1' command provided an error as per below, can you please further assist?

    racadm/Users>set idrac.users.3.enable 0
    racadm set idrac.users.3.enable 0
    [Key=idrac.Embedded.1#Users.3]
    Object value modified successfully

    racadm/Users>set idrac.users.3.delete 1
    racadm set idrac.users.3.delete 1
    ERROR: Invalid object specified.