DRAC / Dobrica Pavlinušić's random unstructured stuff

Mobile - Settings - Register - Help

Home

Quick jump: What's new - Weblogs

Print
Tools

V

4

Tags

{"maxCount":21,"tags":[{"page_count":21,"count":null,"name":"hardware"},{"page_count":18,"count":null,"name":"Welcome"},{"page_count":17,"count":null,"name":"howto"},{"page_count":12,"count":null,"name":"FPGA"},{"page_count":9,"count":null,"name":"arm"},{"page_count":8,"count":null,"name":"OpenVZ"},{"page_count":7,"count":null,"name":"projects"},{"page_count":7,"count":null,"name":"virtualization"},{"page_count":7,"count":null,"name":"linux"},{"page_count":6,"count":null,"name":"air quality"},{"page_count":5,"count":null,"name":"SocialText"},{"page_count":5,"count":null,"name":"Android"},{"page_count":5,"count":null,"name":"STM32"},{"page_count":4,"count":null,"name":"Arduino"},{"page_count":4,"count":null,"name":"RFID"},{"page_count":3,"count":null,"name":"RaspberryPi"},{"page_count":3,"count":null,"name":"home-assistant"},{"page_count":3,"count":null,"name":"ADSL"},{"page_count":3,"count":null,"name":"Jifty"},{"page_count":3,"count":null,"name":"openmoko"},{"page_count":3,"count":null,"name":"KVM"},{"page_count":2,"count":null,"name":"razmjenavjestina"},{"page_count":2,"count":null,"name":"NoSQL"},{"page_count":2,"count":null,"name":"gsm"},{"page_count":2,"count":null,"name":"WebGUI"},{"page_count":2,"count":null,"name":"security"},{"page_count":2,"count":null,"name":"QEMU"},{"page_count":2,"count":null,"name":"usb"},{"page_count":2,"count":null,"name":"svn"},{"page_count":2,"count":null,"name":"433 MHz"},{"page_count":2,"count":null,"name":"eeepc"},{"page_count":2,"count":null,"name":"STM8"},{"page_count":2,"count":null,"name":"VoIP"},{"page_count":2,"count":null,"name":"perl"},{"page_count":2,"count":null,"name":"PowerPC"},{"page_count":2,"count":null,"name":"usb-tester"},{"page_count":2,"count":null,"name":"RF"},{"page_count":2,"count":null,"name":"php"},{"page_count":2,"count":null,"name":"motion sensor"},{"page_count":2,"count":null,"name":"esp8285"},{"page_count":2,"count":null,"name":"DVB"},{"page_count":2,"count":null,"name":"TV"},{"page_count":2,"count":null,"name":"PostgreSQL"},{"page_count":2,"count":null,"name":"PIC"},{"page_count":2,"count":null,"name":"asterisk"},{"page_count":1,"count":null,"name":"nslu2"},{"page_count":1,"count":null,"name":"javascript"},{"page_count":1,"count":null,"name":"PIC16F684"},{"page_count":1,"count":null,"name":"Email"},{"page_count":1,"count":null,"name":"8051"},{"page_count":1,"count":null,"name":"A10"},{"page_count":1,"count":null,"name":"csv"},{"page_count":1,"count":null,"name":"ppc"},{"page_count":1,"count":null,"name":"video"},{"page_count":1,"count":null,"name":"Kindle"},{"page_count":1,"count":null,"name":"Ubuntu"},{"page_count":1,"count":null,"name":"wiki"},{"page_count":1,"count":null,"name":"bluetooth"},{"page_count":1,"count":null,"name":"css"},{"page_count":1,"count":null,"name":"sdr"},{"page_count":1,"count":null,"name":"printer"},{"page_count":1,"count":null,"name":"https"},{"page_count":1,"count":null,"name":"Bioinformatics"},{"page_count":1,"count":null,"name":"Dell"},{"page_count":1,"count":null,"name":"subversion"},{"page_count":1,"count":null,"name":"MSP430"},{"page_count":1,"count":null,"name":"icecast"},{"page_count":1,"count":null,"name":"Cisco"},{"page_count":1,"count":null,"name":"PPPoE"},{"page_count":1,"count":null,"name":"vpn"},{"page_count":1,"count":null,"name":"eeprom"},{"page_count":1,"count":null,"name":"GXemul"},{"page_count":1,"count":null,"name":"Seaside"},{"page_count":1,"count":null,"name":"http"},{"page_count":1,"count":null,"name":"kde"},{"page_count":1,"count":null,"name":"CARNet"},{"page_count":1,"count":null,"name":"hid"},{"page_count":1,"count":null,"name":"darkice"},{"page_count":1,"count":null,"name":"gearman"},{"page_count":1,"count":null,"name":"Baze podataka"},{"page_count":1,"count":null,"name":"iBook"},{"page_count":1,"count":null,"name":"mash"},{"page_count":1,"count":null,"name":"IR"},{"page_count":1,"count":null,"name":"olsr"},{"page_count":1,"count":null,"name":"wifi"},{"page_count":1,"count":null,"name":"ogg"},{"page_count":1,"count":null,"name":"esp8266"},{"page_count":1,"count":null,"name":"fbtft"},{"page_count":1,"count":null,"name":"FreeBSD"},{"page_count":1,"count":null,"name":"Smalltalk"},{"page_count":1,"count":null,"name":"A20"},{"page_count":1,"count":null,"name":"sysadmin"},{"page_count":1,"count":null,"name":"streaming"},{"page_count":1,"count":null,"name":"bcm968xx"},{"page_count":1,"count":null,"name":"git"},{"page_count":1,"count":null,"name":"svn2cvs"},{"page_count":1,"count":null,"name":"rk3066"},{"page_count":1,"count":null,"name":"shell"},{"page_count":1,"count":null,"name":"debian"},{"page_count":1,"count":null,"name":"ups"},{"page_count":1,"count":null,"name":"ssl"},{"page_count":1,"count":null,"name":"Apple"},{"page_count":1,"count":null,"name":"3M"},{"page_count":1,"count":null,"name":"mysql"},{"page_count":1,"count":null,"name":"Announcements"},{"page_count":0,"count":null,"name":"bljak"},{"page_count":0,"count":null,"name":"HTC"}]}

There are no tags for this page.

Incoming Links

There are no pages that link to this page yet.

Attachments

Dobrica Pavlinušić's random unstructured stuff

DRAC

Dell DRAC is very bad remote KVM which doesn't age well at all. Only way I found which works to have keyboard work is to use Windows XP for iDRAC7 on PowerEdge R720 which is just junk.

There is very nice fix for keyboard problems on Linux at

https://github.com/anchor/idrac-kvm-keyboard-fix

which doesn't work for me but might be worth exploring.

To make it work at all on Linux I did:

apt install icedtea-netx

Modified /etc/java-11-openjdk/security/java.security to remove everything which disables old and broken cipers which are required for DRAC 7 to work

klin:/etc# git show java-11-openjdk/security/java.security
commit 2af32fcc93a6480821dc69ef7540c7979dc4c86b (HEAD -> master)
Author: root <root@klin.ffzg.hr>
Date:   Tue Nov 12 06:25:03 2019 +0100

    daily autocommit

diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security
index 0c87fe11..848454b9 100644
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -576,8 +576,8 @@ krb5.kdc.bad.policy = tryLast
 #   jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048
 #
 #
-jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
-    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224
+#jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
+#    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

 #
 # Algorithm restrictions for signed JAR files
@@ -620,8 +620,8 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
 #
 # See "jdk.certpath.disabledAlgorithms" for syntax descriptions.
 #
-jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
-      DSA keySize < 1024
+#jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
+#      DSA keySize < 1024

 #
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security
@@ -653,8 +653,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
 #
 # Example:
 #   jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
-jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
-    EC keySize < 224, 3DES_EDE_CBC, anon, NULL
+#jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
+#    EC keySize < 224, 3DES_EDE_CBC, anon, NULL

 #
 # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)

Upload Files

Click "Browse" to find the file you want to upload. When you click "Upload file" your file will be uploaded and added to the list of attachments for this page.

Maximum file size: 50MB

Add a link to the attachment at the top of the page? Images will appear in the page.

Expand zip archive and attach individual files to the page

Done

	File Name	Author	Date Uploaded	Size

Close

Delete Selected Files

Upload Files

Click "Browse" to find the file you want to upload. When you click "Add file" this file will be added to the list of attachments for this page, and uploaded when you save the page.

Add a link to the attachment at the top of the page? Images will appear in the page when the page is saved.

Expand zip archive and attach individual files to the page

Done

Add file

Add Tags

Enter a tag and click "Add tag". The tag will be saved when you save the page.

Tag:

Suggestions:

Done

Add tag

Dell DRAC is very bad remote KVM which doesn't age well at all. Only way I found which works to have keyboard work is to use Windows XP for iDRAC7 on PowerEdge R720 which is just junk.

There is very nice fix for keyboard problems on Linux at

https://github.com/anchor/idrac-kvm-keyboard-fix

which doesn't work for me but might be worth exploring.

To make it work at all on Linux I did:

.pre
apt install icedtea-netx
.pre

Modified /etc/java-11-openjdk/security/java.security to remove everything which disables old and broken cipers which are required for DRAC 7 to work

.pre
klin:/etc# git show java-11-openjdk/security/java.security
commit 2af32fcc93a6480821dc69ef7540c7979dc4c86b (HEAD -> master)
Author: root <root@klin.ffzg.hr>
Date:   Tue Nov 12 06:25:03 2019 +0100

daily autocommit

diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security
index 0c87fe11..848454b9 100644
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -576,8 +576,8 @@ krb5.kdc.bad.policy = tryLast
 #   jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048
 #
 #
-jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
-    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224
+#jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
+#    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

#
 # Algorithm restrictions for signed JAR files
@@ -620,8 +620,8 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
 #
 # See "jdk.certpath.disabledAlgorithms" for syntax descriptions.
 #
-jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
-      DSA keySize < 1024
+#jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
+#      DSA keySize < 1024

#
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security
@@ -653,8 +653,8 @@ jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
 #
 # Example:
 #   jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048
-jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
-    EC keySize < 224, 3DES_EDE_CBC, anon, NULL
+#jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
+#    EC keySize < 224, 3DES_EDE_CBC, anon, NULL

#
 # Legacy algorithms for Secure Socket Layer/Transport Layer Security (SSL/TLS)

.pre