python-hpilo icon indicating copy to clipboard operation
python-hpilo copied to clipboard

Support for roles and/or new privileges gen10/ilo5

Open JasperAlgra opened this issue 3 years ago • 1 comments

Hi,

On some new Gen10 servers (ILO5) I found "new features" (for me) such as decommission or web-based intelligent provisioning (which is really great). But.. It doesn't work for my user added with hpilo_cli because there are privileges missing.

I'm adding like this:

./hpilo_cli iloXYZ.mgmt.kantoor.eztrack.nl mod_user user_login=jasper user_name=jasper admin_priv=true virtual_media_priv=true remote_cons_priv=true reset_server_priv=true config_ilo_priv=true

This gives a user like this: afbeelding

Note the missing privileges for:

  • Host bios
  • Host NIC
  • Host Storage
  • Recovery set

I tried adding the privs I found in https://github.com/HewlettPackard/ilo-rest-api-docs/blob/master/source/includes/_ilo5_accountservice.md#roles-and-privileges such as "HostBIOSConfigPriv" -> host_bios_config_priv but I think these are all "hardcoded" in python-hpilo, right?

Could this be supported?

Another way would be to support to use roles. I'm not sure if roles are actually a user property or just a copy of set of privs from another user. "In iLO 5 1.40 and later, you can use RoleId to create users with specific starting privileges."

Please let me know I can help in any way.

JasperAlgra avatar Mar 02 '22 13:03 JasperAlgra

These can be supported if someone contributes the changes for it. I don't have access to gen10 servers at the moment.

seveas avatar Sep 08 '22 17:09 seveas