SUSE Support

Here When You Need Us

ipmitool: lanplus: hanging on getting cipher suites

This document (000020250) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 15 SP2

Situation

On SLES15 SP2 (kernel 5.3.18*), the following ipmitool command is hanging for 46 seconds every time it is run, where in the past it returned after less than a second:
 
ipmitool -N 10 -R 4 -I lanplus -H <ip-address> -U <username> -P <password> fru print 0
 
The following message is returned: “Unable to Get Channel Cipher Suites”.
 
This issue occurred with ipmitool-1.8.18+git20200204.7ccea28-1.22.x86_64.rpm (included with SLES15 SP2).

Resolution

The workaround is to include the command line option -C 3 to the ipmitool command.

This makes the default cipher revert to 3 (the default from previous versions of ipmitool).

 

Cause

This issue is a result of the change in the ipmitool code which tries to detect which cipher suite should be used before establishing a connection. This is described here:
 
The man page has not been updated to reflect that the new default cipher suite is 17, instead of 3.

Status

Reported to Engineering

Additional Information

The delay seen is 10 seconds unless the "-N 10" argument is set, which causes the delay to last ~45 seconds.

This is only seen on hardware that doesn't support cipher suite 17.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000020250
  • Creation Date: 14-May-2021
  • Modified Date:18-May-2021
    • SUSE Linux Enterprise Server

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com

tick icon

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

tick icon

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

tick icon

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.