Le 5 oct. 2017 à 09:53, Gianluca Cecchi <gianluca.cecchi(a)gmail.com&gt; a écrit : Hello, on 4.1.6 I'm configuring fencing on HP blades Gen9. It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as the port and ssh=1 in options Question: why ssh=1??? the agent is named ilo_ssh.... shouldn't be obvious??? The same form command line I MUST set -x even if I use fence_ilo_ssh command Nevertheless, this way I get successful test Sometimes I don't get the same result if I run from shell eg: fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x -o status I get sometimes: Unable to connect/login to fencing device I think it could be some sort of delay timeout. In fence_ilo_ssh I see these kinds of timeouts in help --power-timeout=[seconds] Test X seconds for status change after ON/OFF --shell-timeout=[seconds] Wait X seconds for cmd prompt after issuing command --login-timeout=[seconds] Wait X seconds for cmd prompt after login --power-wait=[seconds] Wait X seconds after issuing ON/OFF --delay=[seconds] Wait X seconds before fencing is started How do they map with gui settings options in case I would use some of them? Also, how do I map the command line option -4, --inet4-only Perhaps inet4_only=1 ? I see that ssh=1,inet4_only=1 works but also ssh=1,inet4_only=1,foo=1 works So it is not a reliable test to verify syntax... All in all do you think it is the best agent for ilo4 based blades? I have made some test with fence_ilo4 but unable to get success... what should I enable on ilo web administration page in this case, if you think the agent would be better for any reason? Thanks, Gianluca _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users

I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 and everything works fine. Nothing special on the ilo side, just up to date firmware.

​Please take a look at man page of fence_ilo_ssh and scroll down to STDIN PARAMETERS section. These parameters needs to be used in Options field in webadmin ​

> All in all do you think it is the best agent for ilo4 based blades? > ​Yes, according to our knowledge ilo4 should be used for all new HP servers (and also ilo4 agent has most of default parameters, so if you don't have some special configuration on your server you should be fine. ​ > I have made some test with fence_ilo4 but unable to get success... what > should I enable on ilo web administration page in this case, if you think > the agent would be better for any reason? > ​If you are using admin user, then the default should be fine. If you are want to create a special user just for oVirt PM operations then following permissions needs to be assigned to user within iLO4 configuration​: Virtual power and reset Remote Console Access Virtual Media And you need to add following into Options for the host PM settings: privlvl=operator ​ Thanks Martin​

On Thu, Oct 5, 2017 at 11:38 AM, Gianluca Cecchi < gianluca.cecchi(a)gmail.com&gt; wrote: > On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina <mperina(a)redhat.com&gt; > wrote: > >> >> >> >> ​Please take a look at man page of fence_ilo_ssh and scroll down to >> STDIN PARAMETERS section. These parameters needs to be used in Options >> field in webadmin >> ​ >> > > It seems on ovirt node the man pages are missing, probably to cut off > installation base.. ;-) > ​Unfortunately you are right, space saving :-( ​ > Anyway I would check installing the ordinary rpm package on a base CentOS > 7 system. > In the mean time I have checked the STDIN PARAMETERS section of > fence_ilo4 man page for a CentOS 6.7 clustersuite server I have at hand, > thanks. I think it should be similar > ​They should be more or less the same ... ​ > > > >>> All in all do you think it is the best agent for ilo4 based blades? >>> >> >> ​Yes, according to our knowledge ilo4 should be used for all new HP >> servers (and also ilo4 agent has most of default parameters, so if you >> don't have some special configuration on your server you should be fine. >> ​ >> >> >>> I have made some test with fence_ilo4 but unable to get success... what >>> should I enable on ilo web administration page in this case, if you think >>> the agent would be better for any reason? >>> >> >> ​If you are using admin user, then the default should be fine. If you >> are want to create a special user just for oVirt PM operations then >> following permissions needs to be assigned to user within iLO4 >> configuration​: >> >> Virtual power and reset >> Remote Console Access >> Virtual Media >> >> And you need to add following into Options for the host PM settings: >> >> privlvl=operator >> >> ​ >> Thanks >> >> Martin​ >> >> > Perfect: it works. > Assigned the three privileges to the fenceuser user and now the > corresponding command line works > > # fence_ilo4 -a ilo_ip -l fenceuser -L operator -S > /usr/local/bin/my_fence_script.sh -o status > Status: ON > # > > And also from gui the test is ok using ilo4 type and > "privlvl=operator,inet4_only=1" option > ​Great to hear! ​ > > BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual > power and reset" privilege for the dedicated user (at least to get the > status of the blade) >

​Thanks for info! Martin ​ > > Thanks again, > Gianluca > >