You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In case we start with a brand new xPU with the inital password (for example after factory reset [1]) the role would fail and BMC password won't be set.
The reason is because of the redfish collection module implementation, it crawls on the URL path.
For example, if you try to PATCH https:///redfish/v1/AccountService/Accounts/root
then it will first do GET for:
https:///redfish/v1/AccountService/
https:///redfish/v1/AccountService/Accounts/
https:///redfish/v1/AccountService/Accounts/root
Because the inital password wasn't set then you won't be able to do GET for https://<DPU-BMC-IP>/redfish/v1/AccountService/ and the entire role would fail.
Suggested workaround:
For this role use CURL
Work with Ansible redfish collection to allow skipping the path validation, this is required for scalability as well (issue we talked about in the past)
$ curl -k -u "root:0penBmc" https://172.22.4.2/redfish/v1/AccountService
{
"@Message.ExtendedInfo": [
{
"@odata.type": "#Message.v1_1_1.Message",
"Message": "The password provided for this account must be changed before access is granted. PATCH the Password property for this account located at the target URI '/redfish/v1/AccountService/Accounts/root' to complete this process.",
"MessageArgs": [
"/redfish/v1/AccountService/Accounts/root"
],
"MessageId": "Base.1.15.0.PasswordChangeRequired",
"MessageSeverity": "Critical",
"Resolution": "Change the password for this account using a PATCH to the Password property at the URI provided."
}
]
}
In case we start with a brand new xPU with the inital password (for example after factory reset [1]) the role would fail and BMC password won't be set.
The reason is because of the redfish collection module implementation, it crawls on the URL path.
For example, if you try to PATCH https:///redfish/v1/AccountService/Accounts/root
then it will first do GET for:
https:///redfish/v1/AccountService/
https:///redfish/v1/AccountService/Accounts/
https:///redfish/v1/AccountService/Accounts/root
Because the inital password wasn't set then you won't be able to do GET for
https://<DPU-BMC-IP>/redfish/v1/AccountService/
and the entire role would fail.Suggested workaround:
[1]
https://docs.nvidia.com/networking/display/bluefieldbmcv2404/bmc+management#src-2821766407_BMCManagement-FactoryResetRedfishCommand
https://docs.nvidia.com/networking/display/bluefieldbmcv2404/bmc+management#src-2821766407_BMCManagement-FactoryResetIPMICommand
The text was updated successfully, but these errors were encountered: