Yea, our passwords are 20 char.
Trimmed to 16 char . . . trying . . . that WORKED!
Something else to remember!
Thanks Everyone!
Rick
From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Jordan Slingerland Sent: Tuesday, April 26, 2016 3:59 PM To: Stephen Stocke Stephen.Stocke@je.logicalis.com; toasters@teaparty.net Subject: RE: accessing service processor
Could be!
http://www.gossamer-threads.com/lists/netapp/toasters/14122
From: toasters-bounces@teaparty.netmailto:toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Stephen Stocke Sent: Tuesday, April 26, 2016 3:47 PM To: toasters@teaparty.netmailto:toasters@teaparty.net Subject: RE: accessing service processor
Rick,
I seem to recall there being a limit to the length of the naroot password and the SP truncates the password to the first 16 characters of the root password. Do have a root password >16 characters?
-Steve
From: toasters-bounces@teaparty.netmailto:toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Tim McCarthy Sent: 26 April 2016 19:40 To: toasters@teaparty.netmailto:toasters@teaparty.net; Rhodes, Richard L. <rrhodes@firstenergycorp.commailto:rrhodes@firstenergycorp.com> Subject: Re: accessing service processor
If possible.... Try a serial connection, then press control-g and then try logging into the service processor
Maybe you should re run the service processor setup and see if that helps. Sent from Outlook Mobilehttps://aka.ms/qtex0l
_____________________________ From: Rhodes, Richard L. <rrhodes@firstenergycorp.commailto:rrhodes@firstenergycorp.com> Sent: Tuesday, April 26, 2016 2:36 PM Subject: accessing service processor To: <toasters@teaparty.netmailto:toasters@teaparty.net> Hello,
This is probably really dumb, but I'm stumped.
I've been working on a support case with IBM (nSeries). They asked me to get some info from the service processor. So I ssh to the SP, get a prompt, try and login as naroot (using root's pwd), which fails.
The last time I tried to ssh and log onto a SP was when these systems were setup +2 years ago. Back then it worked. Since then we've regularly rolled the root password every X months. It's my understanding that naroot at the service processor uses the OnTap root password.
I've tried to access the SP on several nSeries system and they all fail the same way.
IBM nSeries N3220(NetApp FAS2240) OnTap 8.1.2P1 7-mode
Any thoughts are appreciated.
Rick
What I've done:
- I know the root password - I used it to log onto the filer on the main interface
Using username "root". root@filerxxxx's password: filerxxxx>
- It's status is online
filerxxxx> sp status Service Processor Status: Online Firmware Version: 2.1.1 Mgmt MAC Address: xx:xx:xx:xx:xx:xx Ethernet Link: up, 100Mb, full duplex, auto-neg complete Using DHCP: no IPv4 configuration: IP Address: xxx.xx.xx.xxx Netmask: 255.255.255.0 Gateway: xxx.xx.xx.x IPv6 configuration: Disabled
- all hosts are allowed to access the sp
filerxxxx> options sp sp.autologout.enable on sp.autologout.timeout 60 sp.setup on sp.ssh.access *
- it pings
- it gives a login prompt, but it doesn't take the root password
ssh naroot@filerxxxxs naroot@filerxxxxs's password: Permission denied, please try again. naroot@filerxxxxs's password:
- I've tried ssh to the SP via the DNS name (filerxxxxs) and the IP (xxx.xx.xx.xxx)
- I am aware of the 15min timeout period on 6 unsuccessful login attempts.
- I've tried ssh via putty from a Win laptop, and, ssh from an AIX system. Both give the same result - it naroot/root password doesn't work.
- I rebooted the SP
filerxxxx> sp reboot NOTE : If your console connection is through the SP,it will be disconnected Do you want to reboot the SP now? (y/n) :? y Console connection through the SP will now be dropped
- Reboot didn't help - still can't login as naroot with root's password
ssh naroot@filerxxxxs naroot@filerxxxxs's password: Permission denied, please try again.
________________________________ ________________________________
The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.
________________________________ This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal ________________________________
DISCLAIMER: This email communication does not create or vary any contractual relationship between LogicalisCI and you. Internet communications are not secure and accordingly LogicalisCI does not accept any legal liability for the contents of this message. The contents of this email are confidential to the intended recipient at the email address to which it has been addressed. It may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error, please contact LogicalisCI on the above number (listed as Main) quoting the name of the sender and the addressee and then delete it from your system. Please note that neither LogicalisCI nor the sender accepts any responsibility for viruses and it is your responsibility to scan the email and attachments (if any). Please be aware that LogicalisCI may monitor email traffic data and also email content for security purposes.
The following companies are collectively referred to in the above statements as LogicalisCI:
Logicalis Channel Islands Limited, Registered in Jersey No: 67161, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH
Logicalis Jersey Limited, Registered in Jersey No: 10124, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH
Logicalis Guernsey Limited, Registered in Guernsey No: 10896, Registered Office: Pitronnerie Road, St. Peter Port, Guernsey, GY1 2RF
________________________________
----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.