Announcement Banner

frigo_

updated

4 years ago

F

frigo_

2 Intern

•

22 Posts

0

1431

January 12th, 2023 02:00

iDRAC 6.10.00.00 Internal Server Error when logging through the GUI

Greetings

I upgraded some R640 from 6.00.30.00 to 6.10.00.00.

When clicking on the login button, Firefox does not log me in. Firefox network tab shows a POST to /sysmgmt/2015/bmc/session failing:
POST https://10.64.225.178/sysmgmt/2015/bmc/session 500 Internal Server Error

only the GUI access is broken, I can ssh to the iDRAC just fine.

Any help is appreciated. Thanks!

  • frigo_

    2 Intern

    •

    22 Posts

    669

    2

    Posted January 23rd, 2023 14:00

    I was able to go further with the investigation
    the binary is provided on https://opensource.dell.com/releases/idrac9/6.10.00.00/ and the core can be investigated (with gdb-multiarch).

    iDRAC copies the list of SANs of the SSL certificate into a global char gSANentries[1024] buffer without any check on whether it fits or not, so if the total length of comma-delimited SANs exceeds this it overflows into the next global variable, which is "gSessionMap" in iDRAC 6.10.00.00 and it fails later.

    We will make sure to use less SANs in our SSL certificates. (for us by this calculation we should limit ourselves to 28 instead of 52 at the moment. Maybe it was a bit ambitious).

  • frigo_

    2 Intern

    •

    22 Posts

    725

    0

    Posted January 12th, 2023 02:00

    I add that redfish is working when using basic authentication, but not session authentication.

  • frigo_

    2 Intern

    •

    22 Posts

    722

    0

    Posted January 12th, 2023 03:00

    Checking a TSR, there are plenty of core dumps like this one

    core.6.10.54.00.00.fcgi-auth.28613.gz

    which is probably the thing breaking the authentication. Unless someone has an idea, I will probably open a support case.

  • frigo_

    2 Intern

    •

    22 Posts

    718

    0

    Posted January 12th, 2023 04:00

    problems goes away when removing my custom SSL certificate.

  • olaszfiu

    1 Message

    615

    0

    Posted March 27th, 2023 07:00

    Thank for this post. I had exactly the same issue using a SSL certificate with many SANs on my iDRACs.

    I did a "racadm sslresetcfg" and restored the factory default certificate.

    BTW, this is defintely a bug, someone at DELL should absoluetly fix it !