Account Services Question

[downtownle]

Hello Tex,

we are using 16G Server with latest idrac9 firmware code 7.XX.XX. here is a summary of my challenge. To adjust the account settings for a user, we use the following from other providers: AccountLockoutCounterResetAfter, AccountLockoutDuration and AccountLockoutThreshold. However, these are all set to ReadOnly on DELL, so I cannot overwrite them.

https://www.dell.com/support/manuals/en-ca/idrac9-lifecycle-controller-v4.x-series/idrac9_4.00.00.00_redfishapiguide_pub/accountservice?guid=guid-3ee10fcd-1dcc-4ff9-ae7e- dc20998ca2a5&lang=en-us

Is there a way to change this with the current firmware using Redfish? I can't find anything about it in the idrac9 gui mapping guide or in a newer document for the API guide. They may be able to help here. if you have one or two examples let us know.

[texroemer]

Hi @downtownle

iDRAC9 implementation does not support these properties and in general iDRAC does not support account lockout but instead supports IP blocking. I did though escalate this concern to internal teams and there are plans to support these properties in a future iDRAC release, support account lockout.

Thanks Tex

[downtownle]

Hello Tex,

this means, as I understand it, that at this point it is no longer implemented after firmware 4.00? But would it be possible to implement this again in the next firmware release?

[texroemer]

I flashed iDRAC back to 3.36 and under "redfish/v1" AccountService falls under "redfish/v1/Managers/iDRAC.Embedded.1/AccountService" which does show these 3 properties. I tried to run PATCH using this URI but it fails stating method is not allowed.

Are you saying there was an older iDRAC version where PATCH on these 3 properties was supported? If yes can you share a screenshot or example of it passing.

[downtownle]

Hello Tex,

No, I don't have an example with an old version where it worked. I just thought so because it was in the API guide of firmware 4.00 that there were the value API fields. https://www.dell.com/support/manuals/en-us/idrac9-lifecycle-controller-v4.x-series/idrac9_4.00.00.00_redfishapiguide_pub/accountservice?guid=guid-3ee10fcd-1dcc-4ff9-ae7e-dc20998ca2a5&lang=en-us

[texroemer]

Ah ok, so the screenshot you pasted shows RO so these properties were never supported. As stated earlier iDRAC currently only supports blocking/lockout IPs not blocking/lockout accounts.

[downtownle]

Close the issue maybe in 17G we can solve this problem