<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0"
 xmlns:blogChannel="http://backend.userland.com/blogChannelModule"
>

<channel>
<title><![CDATA[Dobrica Pavlinušić's random unstructured stuff: DRAC]]></title>
<link>https://saturn.ffzg.hr/rot13/index.cgi?drac</link>
<description></description>
<pubDate>Tue, 12 Nov 2019 17:52:54 -0000</pubDate>
<webMaster>root@saturn.ffzg.hr</webMaster>
<generator>Socialtext Workspace v2.19.0.2</generator>

<item>
<title><![CDATA[DRAC]]></title>
<link>https://saturn.ffzg.hr/rot13/index.cgi?drac</link>
<description><![CDATA[<div>Creator: Dobrica Pavlinušić</div><hr/><div class="wiki">
<p>
Dell DRAC is very bad remote KVM which doesn't age well at all. Only way I found which works to have keyboard work is to use Windows XP for iDRAC7 on PowerEdge R720 which is just junk.</p>
<p>
There is very nice fix for keyboard problems on Linux at</p>
<p>
<a target="_blank" title="(external link)" href="https://github.com/anchor/idrac-kvm-keyboard-fix">https://github.com/anchor/idrac-kvm-keyboard-fix</a></p>
<p>
which doesn't work for me but might be worth exploring.</p>
<p>
To make it work at all on Linux I did:</p>
<pre>
apt install icedtea-netx
</pre>
<br /><p>
Modified /etc/java-11-openjdk/security/java.security to remove everything which disables old and broken cipers which are required for DRAC 7 to work</p>
<pre>
klin:/etc# git show java-11-openjdk/security/java.security
commit 2af32fcc93a6480821dc69ef7540c7979dc4c86b (HEAD -&gt; master)
Author: root &lt;root@klin.ffzg.hr&gt;
Date:   Tue Nov 12 06:25:03 2019 +0100

    daily autocommit

diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security
index 0c87fe11..848454b9 100644
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -576,8 +576,8 @@ krb5.kdc.bad.policy = tryLast
 #   jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize &lt; 2048
 #
 #
-jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA &amp; usage TLSServer, \
-    RSA keySize &lt; 1024, DSA keySize &lt; 1024, EC keySize &lt; 224
+#jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA &amp; usage TLSServer, \
+#    RSA keySize &lt; 1024, DSA keySize &lt; 1024, EC keySize &lt; 224

 #
 # Algorithm restrictions for signed JAR files
@@ -620,8 +620,8 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA &amp; usage TLSServer, \
 #
 # See &quot;jdk.certpath.disabledAlgorithms&quot; for syntax descriptions.
 #
-jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize &lt; 1024, \
-      DSA keySize &lt; 1024
+#jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize &lt; 1024, \
+#      DSA keySize &lt; 1024

 #
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security
@@ -653,8 +653,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize &lt; 1024, \
 #
 # Example:
 #   jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize &lt; 2048
-jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize &lt; 1024, \
-    EC keySize &lt; 224, 3DES_EDE_CBC, anon, NULL
+#jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize &lt; 1024, \
+#    EC keySize &lt; 224, 3DES_EDE_CBC, anon, NULL

 #
 # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)

</pre>
</div>
]]></description>
<author>Dobrica Pavlinu&#x161;i&#x107;</author>
<category></category>
<guid isPermaLink="true">https://saturn.ffzg.hr/rot13/index.cgi?drac</guid>
<pubDate>Tue, 12 Nov 2019 17:52:54 -0000</pubDate>
</item>
</channel>
</rss>