We've approached SuperMicro about this on two occasions, and they are completely disinterested. The latest F-U: If you want to try to access a console on the latest SuperMicro IPMI from a Mac, please make sure you have X11 installed and running. Which is an automatic +10 minutes to any unplanned downtime that winds up needing console access to resolve. But it seems like every new release of their firmware increases the number of workaround steps to the point where it can now take 10+ minutes to get remote access to the console of a server. Obviously there are workarounds to this, running the web client in a virtual machine that only talks on a VPN, etc. So pretty soon we will not only have to use poorly-configured clients to access these consoles, we will have to let them fall out of date with security patches as well. Worse yet, among the many Java warnings that are generated every time a console is generated is one that says that future versions of Java will no longer support these types of unsigned apps at all because they're so insecure. The latest batch of servers we ordered has moved the console preview functionality from a simple dynamically-generated JPEG to yet another unsigned Java webstart app that sits on the IPMI home page and tries to auto-run every time it is loaded. Basically, if you don't configure your browser to stand outside stark naked with a downward-pointing arrow on its back labelled "enter here" you won't be getting console access to your SuperMicro servers.Īgainst any sort of rationality, they're not phasing this stuff out, they're making it worse. SuperMicro's IPMI controllers have long required unsigned Java WebStart applets. We've been so dependent on SuperMicro for so long that I don't even know where to start on this.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |