Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add initial auth support for AST2400 based boards #2

Open
wants to merge 3 commits into
base: bmc-support
Choose a base branch
from

Conversation

devicenull
Copy link

Supermicro X11SSE-F boards use an entirely different auth scheme from the previous ones (but yes, they've hijacked auth type 16 again...).

Luckily, they present a server version of 055.008, so they're pretty easy to detect.

Another change with these controllers, is you have to use websockify's --tls-client flag. The IPMI controller now speaks VNC over SSL.

While this will successfully auth, it will not remain connected and actually work. We end up disconnecting with 'Unexpected server message (Type: 66)', but it's a start.

@disaster123
Copy link

Another note this ALSO applies to X10 boards with redfish support.

@LAKostis
Copy link

LAKostis commented Mar 24, 2017 via email

@devicenull
Copy link
Author

We also have a bunch of X10 boards that have been working well without this. It comes down to the IPMI controller, if you have an X10 with Aspeed AST2400, then it would probably have issues.

I also have more of the protocol working and can see video... but the keyboard input drops the connection (and breaks the KVM until you do the iKVM reset)

@disaster123
Copy link

@LAKostis i don't know hwta oyu want to tell me. I have never told that all X10 boards are affected but there are X10 board which have the same problems like X11 / AST2400 chip.

@LAKostis
Copy link

@disaster123 I was just curious about because you've mentioned about existing problems with REDFISH_ firmwares for X10 but again we never had any troubles with them. Maybe it's another surprise from Supermicro where they activate different functionality within the same image.

@devicenull
Copy link
Author

Added support for actually sending keyboard/mouse events. These are helpfully exactly the same as the ATEN ones.

This is largely functional at this point; though for some reason caps lock isn't working and the video display gets laggy if you move the mouse around a lot.

@psyno
Copy link

psyno commented Apr 5, 2018

I wanted to try your changes for AST2400 but i already failed with websockify. Tried to pass "--ssl-target" or "--ssl-only" but all i get is:

handler exception: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:581)

Any hints?

@maisn3r
Copy link

maisn3r commented Oct 22, 2019

Hello all,

i also have problem AST2400, my server boards are X10DRL-i with AST2400, trying from 3 days to bring noVNC to works with this stupid things without success. I have also few IDRAC8 servers which using standard VNC protocol and working like a charm, really need somebody help, i am happy to pay for the work!

@maisn3r
Copy link

maisn3r commented Oct 23, 2019

Hello,

i have success with that video, you need stunnel as client after the websockify, also got che client certs and keys from the java application, now working perfect. The problem is X11SSL-f not working on this ways i am afraid, searching UDP port 623 also.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants