Skip to content

GUACAMOLE-2300: Add IPMI Serial-over-LAN protocol support#298

Open
ciroiriarte wants to merge 5 commits into
apache:mainfrom
ciroiriarte:feature/ipmi-protocol
Open

GUACAMOLE-2300: Add IPMI Serial-over-LAN protocol support#298
ciroiriarte wants to merge 5 commits into
apache:mainfrom
ciroiriarte:feature/ipmi-protocol

Conversation

@ciroiriarte

@ciroiriarte ciroiriarte commented Jul 13, 2026

Copy link
Copy Markdown

Documentation for the new ipmi protocol (see companion guacamole-server / guacamole-client PRs).

JIRA: https://issues.apache.org/jira/browse/GUACAMOLE-2300

What's included

  • IPMI BMC configuration guide (Dell iDRAC, Lenovo XCC, Supermicro), wired into the manual toctree.
  • IPMI connection-parameter reference added to the configuration chapter.
  • Notes on the asynchronous behavior of the IPMI control menu.

Related PRs

…XCC, Supermicro)

Document the validated per-vendor procedure to enable IPMI-over-LAN and
Serial-over-LAN, the cipher suite each vendor requires (Supermicro 3, Lenovo
XCC 17, Dell iDRAC 3 or 17), the workaround-flags presets, and ready-to-use
Guacamole connection examples, plus a troubleshooting section keyed to the
common RMCP+/cipher/encryption-policy errors.
…uration chapter

Document all IPMI connection parameters in the standard configuration
reference: network (hostname/port/timeout), authentication and encryption
(username, password, k-g, privilege-level, cipher-suite, encryption-policy,
workaround-flags), the SOL session (sol-payload-instance, keepalive-interval),
and power/boot control (power-on-connect, boot-device, boot-device-persistent),
plus the Ctrl+] control menu (power actions, status, identify, SEL viewer,
break). Cross-references the shared terminal/recording/typescript/clipboard
features and the per-vendor BMC configuration guide.
Note that Ctrl+] control-menu operations open a short BMC management session
that runs in the background, keeping the serial console responsive, with a
'working...' indicator and one operation at a time.
* Remove the "port" connection parameter; it was dropped from the IPMI
  module, as both libipmiconsole and libfreeipmi hardwire 623/UDP.
* Correct the list of non-encrypting cipher suites refused by the
  "required" encryption policy: suite 8 provides confidentiality
  (AES-CBC-128) and is allowed, while suite 16 provides none and is
  refused. The list is now 0, 1, 2, 6, 7, 11, 15, and 16.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant