Unable To Log Into Supercluster PDUs Via Web Browser/port 443

Asset ID:	1-72-2254978.1
Update Date:	2017-05-10
Keywords:

Solution Type Problem Resolution Sure

Solution 2254978.1 : Unable To Log Into Supercluster PDUs Via Web Browser/port 443

Applies to:

Oracle SuperCluster M7 Hardware - Version All Versions and later
Information in this document applies to any platform.

Symptoms

Customer is NOT able to access the PDU via browser.

They have tried to reset the PDUs ( using after ssh to PDU, they did "reset=yes" ) but this didn't work.

They are unable to access PDU via SSH or HTTP

Changes

Systems operating normally can be affected by any security scan that access the PDU's via HTTP or SSH. Therefor this issue can arise at any time.

Cause

Bug 24395426 - OESHM causes conflict with EM when scanning PDU's in the RACK (m7 supercluster)

PDU's are limited to only one connection at a time. An admin or user can connect for one access, either though BUI or SSH, but not both. OESHM runs on SuperCluster. OESHM collects hardware health-related data including PDU.

Bug : 18952597 - SSH LOGIN WITH A BAD PASSWORD WILL LOCK USER OUT WHEN LOGGING IN TO BUI

This is another condition in which the PDU will lock up.

PDU FIRMWARE UPDATES

V2.07 In addition to the bugs below, version V2.07 addresses additional issues

Bug 21481614 provides support for IPv6 on enhanced PDU's
Note : DNS support in IPv6 mode is not supported, only IP addresses may be entered not host names
IPv4 and IPv4/6 modes continue to provide DNS support

Hang after PDU restart
In some environments, if IPv6 communication is on the network the PDU may hang after a restart

Included in V2.07, the following bugs have been addressed

22344127 Enhanced PDU with 2.04 firmware not responding to http interface
23102180 Enhanced PDU network interface goes offline
24657018 Enhanced PDU with firmware v2.05 network port hangs

This version of firmware may address some of the issues relating to scanning with Qualys
The code is known to have passed with Scanner 8.6.27-1, Vulnerability Signatures 2.3.436-2
A single scan of the PDU will unlikely lead to a hang
If there are multiple scans at the same time the PDU may hang

20610028 Enhanced PDU network port hangs from security scan (fw v2.0.2)

Solution

Disabling the PDU in OESHM; this will allow access to the PDU via BUI or SSH.

Updating the PDU firmware to the latest version will also reduce the number of situations in which the PDU BUI can be 'locked out'.

Here is the location of the new PDU firmware as well as installation instructions.

Patch 25393172: SUN RACK II ENHANCED PDU V2.07 has been released
.
1. Using a web browser, connect to the My Oracle Support web site:
http://support.oracle.com
.
2. Locate and download the latest version of the firmware.
To locate the latest PDU firmware, select the Patches & Updates tab then select Product or Family (Advanced Search) and search for Sun Rack II. Follow the instructions on the web site to download the firmware.
.
Readme

https://updates.oracle.com/Orion/Services/download?type=readme&aru=20936734

References

<BUG:18952597> - SSH LOGIN WITH A BAD PASSWORD WILL LOCK USER OUT WHEN LOGGING IN TO BUI
<BUG:21481614> - ER: SUPPORT FOR IPV6 ON ENHANCED PDU FW
<BUG:22344127> - ENHANCED PDU WITH 2.04 FIRMWARE NOT RESPONDING TO HTTP INTERFACE
<BUG:24657018> - ENHANCED PDU WITH FIRMWARE V2.05 NETWORK PORT HANGS
<BUG:24395426> - OESHM CAUSES CONFLICT WITH EM WHEN SCANNING PDU'S IN THE RACK
<BUG:20610028> - ENHANCED PDU NETWORK PORT HANGS FROM NESSUS SECURITY SCAN

Attachments

This solution has no attachment