git.zerfleddert.de Git - rsbs2/blob - rsbs2

   1 #!/usr/bin/perl -w
   2
   3 use LWP::UserAgent;
   4 use XML::Simple;
   5 use Data::Dumper;
   6 use MIME::Base64;
   7 use Digest::MD5 qw(md5);
   8
   9 my $ua = LWP::UserAgent->new;
  10 my $sid;
  11
  12 my $host = "192.168.50.6";
  13 my $user = "admin";
  14 my $pass = "admin";
  15
  16 my @fw_vars = qw(ENABLE_LAN_AUTONEG ENABLE_LAN_100 ENABLE_LAN_FDUPLEX GATEWAY
  17         IP_ADDRESS NETMASK TFTP_FIRMWARE_FILE TFTP_ADDR_FIRMWARE ENABLE_DHCP
  18         ENABLE_DNS DNS_SERVER DNS_DOMAIN_NAME DHCP_CONFIGURE_DNS
  19         ACCESS_CONTROL_SERVER_1 ACCESS_CONTROL_SERVER_2 ACCESS_CONTROL_SERVERS
  20         ACPI_DISABLE_BIOS_SCAN ACPI_FORCE_RSDP_ADDRESS ACPI_FORCE_RSDT_ADDRESS
  21         ACPI_RSDP_BIOS_ROM_ADDRESS ACPI_SCAN_DELAY_SECONDS AMR_AUTH_METHOD
  22         AMR_DISABLE_PCI AMR_ENABLE_ISCSI_TIMEOUT AMR_ENABLED AMR_HOST_INTERFACE
  23         AMR_SERVER_LIST AMR_USB_FDD_CBI_UFI_TRANSPORT AMR_USB_R2T_TIMEOUT_MSEC
  24         AVR_4BIT_ACTION AVR_4BIT_SAMPLE_TIME AVR_ARCHITECTURE AVR_CHIP_TYPE
  25         AVR_CLIENT_LANGUAGE AVR_DISABLE_SVR_MOUSE_ON_SESSION_START
  26         AVR_KB_VERSION AVR_MAX_SESSION_COUNT AVR_MOUSE_ACCELERATION
  27         AVR_MOUSE_MAX_STEP_SIZE AVR_NUMB_MOUSE_PACKETS
  28         AVR_PCI_PATTERN_HANDS_OFF_ENABLED AVR_PREF_KB_STICKY_KEY_MODE_ON
  29         AVR_PREF_KB_TYPING_MODE_ON AVR_PREF_KB_WARN_UNID_EV
  30         AVR_REGISTERS_BASE_ADDR AVR_RESET_PAUSE AVR_SCREEN_REFRESH
  31         AVR_SUPPORTED_CHIP AVR_TILE_TIMEOUT AVR_VIDEO_MEM_BASE_ADDR BAUDRATE
  32         BAUDRATE_MODEM BAUDRATE_PPP BMC_SUPPORTS_GRACEFULL
  33         BMC_TIMESYNC_INTERVAL CARD_NAME CONSOLE_IPMI_MOUSE_BYTE_TIME
  34         CONSOLE_KEYBOARD_ACCESS_MODE CONSOLE_MOUSE_ACCESS_MODE
  35         CONSOLE_VIDEO_PARAM_MODE CONTACT CONTACT_PHONE CRIT_TEMP_SHUTDOWN
  36         CRIT_VOLT_SHUTDOWN DHCP_ADD_EXTENSION DHCP_ADD_SERIAL
  37         DHCP_CONFIGURE_DNS DHCP_HOSTNAME_EXT DHCP_SERVER DHCP_USE_CARDNAME
  38         DIAG_URL DNS_DOMAIN_NAME DNS_SERVER ENABLE_ANON_IPMI ENABLE_ANON_PCI
  39         ENABLE_ANON_WEB ENABLE_AVR_CHIP_DETECT ENABLE_BMC_AUTODETECT
  40         ENABLE_BMC_TIMESYNC ENABLE_CRTC_FETCH ENABLE_DHCP ENABLE_DHCP_HOSTNAME
  41         ENABLE_DNS ENABLE_DS_CONNECTIVITY ENABLE_IO_UART_DECODER ENABLE_LAN_100
  42         ENABLE_LAN_AUTONEG ENABLE_LAN_FDUPLEX ENABLE_MEM_UART_DECODER
  43         ENABLE_PPP ENABLE_REMOTE_FLOPPY_BOOT ENABLE_SELF_DELETE
  44         ENABLE_SERIAL_DBG ETHDRIVER_SID EXPROM_BANNER EXPROM_EBDA_COMPATIBILITY
  45         EXPROM_ENTRY EXPROM_EXIT_DELAY_SEC EXPROM_F3_DELAY_SEC
  46         EXPROM_INT13_COMPATIBILITY EXPROM_SETUP_BANNER FIRMWARE_REVISION
  47         FP_ACDC FP_AMR FP_AVR_ASR FP_AVR_GRAPHIC_CONSOLE FP_AVR_TEXT_CONSOLE
  48         FP_AVRMANCONF_4BIT_SAMPLE FP_AVRMANCONF_ACCESS_MODES FP_AVRMANCONF_CHIP
  49         FP_AVRMANCONF_MOUSE_ACCELERATION FP_AVRMANCONF_MOUSE_TYPE
  50         FP_AVRMANCONF_RESET_PAUSE FP_AVRMANCONF_SCREEN_REFRESH FP_BATTERY
  51         FP_BOARDRESET_BUTTON FP_COMREDIRECT FP_F3_PPP FP_I2C FP_ICMB FP_INSTR
  52         FP_INTERNAL_LAN FP_KEY_CONSOLE FP_LAN_SPEED
  53         FP_LAST_BOARD_POWER_WARNING_ENABLED FP_NO_BLADE_PANEL
  54         FP_NO_CARDCONF_PANEL FP_NO_DIAG_PANEL FP_NO_DSAUTHCONF_PANEL
  55         FP_NO_MANAGE_PANEL FP_NO_MEMORY_PANEL FP_NO_SENSOR_PANEL
  56         FP_NO_SERVERCONF_PANEL FP_NO_SSL_PANEL FP_NO_SYSLOG_PANEL
  57         FP_NO_USERCONF_PANEL FP_PAGING_EMAIL FP_PAGING_SERIAL FP_PAGING_SNMP
  58         FP_PCI_CONFIG FP_PPP FP_PROP_BAUDRATE_REQBOOT FP_PROP_PPP_INIT_REQBOOT
  59         FP_PROP_PS_REQBOOT FP_PROP_TERM_DIRECT_CONNECT_REQBOOT FP_REMOTE_BOOT
  60         FP_REMOTE_DISK FP_REMOTE_POWER FP_SAC_CONSOLE FP_SEL FP_SENSOR_HISTORY
  61         FP_SEQ_SEL FP_SERVER_POWER FP_SERVER_REBOOT FP_SERVER_RESET
  62         FP_SERVER_SHUTDOWN FP_SMM FP_SSL FP_STATUS_DIAG_PANEL
  63         FP_STATUS_MEMORY_PANEL FP_STATUS_PCI_CONFIG FP_STATUS_SAC_CONSOLE
  64         FP_SYSTEM_LAN FP_TEXT_ASR FP_TEXT_CONSOLE FP_TUI FP_VERSION FP_VGA_ASR
  65         FP_VGA_CONSOLE FP_VT100_CONSOLE GATEWAY GATEWAY_MAC
  66         GRATUITOUS_ARP_INTERVAL HELP_LOCATION HIST0_SAMPLE_TIME HIST0_SENSOR_ID
  67         HIST1_SAMPLE_TIME HIST1_SENSOR_ID HIST2_SAMPLE_TIME HIST2_SENSOR_ID
  68         HIST3_SAMPLE_TIME HIST3_SENSOR_ID HTTP_PORT_NUM HTTP_SSL_PORT_NUM
  69         I2C_ADDR_8BIT_CHASSIS_BMC I2C_ADDR_8BIT_MY_BMC I2C_ADDR_8BIT_THIS_CARD
  70         INFOTXT_BPROP_ACCESS INFOTXT_DB_ACCESS IP_ADDRESS IP_ADDRESS_SOURCE
  71         IPMB_RETRY_TIMEOUT IPMB_SEQ_NUM_TIMEOUT IPMB_TX_RETRIES
  72         IPMI_COUNTRY_SELECT IPV4_HEADER_PARAMETERS ISCSI_DEVICE_VENDOR
  73         ISCSI_PRODUCT_EMUL_BD ISCSI_PRODUCT_EMUL_CD ISCSI_PRODUCT_EMUL_FD
  74         LAST_CARD_NAME LAST_ENABLE_DHCP LAST_GATEWAY LAST_IP_ADDRESS
  75         LAST_NETMASK LOCATION MAC_ADDRESS MODEM_CONNECT MODEM_CONNECT2
  76         MODEM_SEPARATOR NETMASK PAGE_RETRIES PAGE_RETRY_DELAY_SEC POST_ERRCODE
  77         POST_PROP PPP_AVAILABLE PPP_INIT PPP_IP_ADDR PPP_NETMASK PPP_PORT
  78         PPP_STATUS PPP_STAY_ALIVE_SECS PPP_WELCOME PPP2_BAUDRATE PPP2_INIT
  79         PPP2_IP_ADDR PPP2_NETMASK PPP2_PORT PPP2_STAY_ALIVE_SECS PRODUCT
  80         PRODUCT_ABBR PS_ASR PS_DISK PS_FAN PS_HARDWARE PS_MEMORY PS_NETWORK
  81         PS_OTHER PS_POST PS_RMC PS_SECURITY PS_SYS_POWER PS_SYS_STATUS
  82         PS_TEMPERATURE PS2_ADAPTER_POWER_UP_MODE PS2_FW_UPDATE_CMD
  83         PS2_FW_UPDATE_IMG_NAME PS2_FW_UPDATE_STATUS RMC_DS_GROUP SAC_PORT
  84         SERVER_CODEPAGE SERVER_HARD_RESET_PULSE_MS SERVER_HARD_RESET_VIA_IPMI
  85         SERVER_ID SERVER_IP SERVER_KEYBOARD SERVER_KEYBOARD_LANGUAGES_LIST
  86         SERVER_MEMORY SERVER_NAME SERVER_POWER_CHANGE_VIA_IPMI
  87         SERVER_POWER_OFF_MODE SERVER_POWER_OFF_PULSE_MS SERVER_POWER_ON_MODE
  88         SERVER_POWER_ON_PULSE_MS SERVER_TIMEZONE SERVER_URL
  89         SESSION_MANAGER_SESSION_TIMEOUT SI_DEF_POLL_INTERVAL_MS
  90         SI_DEF_POLL_OFFSET_MS SMTP_RESP_TIME_SEC SMTP_RETRIES
  91         SMTP_RETRY_DELAY_SEC SMTP_REVERSE_PATH SMTP_SERVER SNMP_AGENT_ENABLED
  92         SNMP_COMMUNITY SNMP_ENTERPRISE_ID SNMP_SERVER SNMP_SERVER_1
  93         SNMP_SERVER_2 SNMP_SERVER_3 SNMP_SERVER_4 SNMP_SERVER_5 SNMP_SERVER_6
  94         SNMP_SERVER_7 SNMP_SERVER_MAC SNMP_SYSOID SNMP_TRAP_MASK
  95         SNMP_TRAP_VERSION SSL_40_OR_128_ENCRYPTION SSL_CAPABLE_FIRMWARE
  96         SSL_ENABLE_ALOG SSL_ENABLE_ALOG_FALLBACK SSL_ENABLE_CLIENT_CERT
  97         SSL_ENABLE_HTTP SSL_ENABLE_HTTPS SSL_ENABLE_NOTIFY
  98         SSL_NOTIFICATION_TIME TELNET_ENABLE TELNET_PORT_NUM
  99         TERMINAL_DIRECT_CONNECT TERMINAL_ENCODING TEXT_CONSOLE_TIMEOUT
 100         TFTP_ADDR_FIRMWARE TFTP_ADDR_REBOOT TFTP_FIRMWARE_FILE TFTP_REBOOT_FILE
 101         TXT_REMOTE_CONSOLE_COLOR_MAP TXT_REMOTE_CONSOLE_FREQ
 102         USB_DEVICE_SETTINGS USE_SERVER_IP_ADDRESS USER_TIMEOUT VENDOR
 103         RMC_AUTODETECT RMC_FUNCTIONS RMC_MODULES AGENT_VERSION BIOS_VER
 104         BOARD_MFT BOARD_MODEL BOARD_PART_NUM BOARD_SERIAL BOARD_VER CAB_MFT
 105         CAB_MODEL CAB_PROD_NUM CAB_PROD_VER CAB_SERIAL CHA_MODEL
 106         CSV_ConfAlarmMailFrom CSV_ConfAlarmMailMessage CSV_ConfAlarmMailSubject
 107         CSV_ConfAlarmMailType CSV_ConfAlarmMailUserInfo0
 108         CSV_ConfAlarmMailUserInfo1 PER_USER_PAGING RMC_SEL_FILTER
 109         SERVER_AD_NAME SERVER_AD_NAME2 SERVER_AD_NAME3 SERVER_AD_NAME4
 110         SERVER_CONTACT SERVER_DESCRIPTION SERVER_IP_ADDRESS SERVER_IP_ADDRESS2
 111         SERVER_IP_ADDRESS3 SERVER_IP_ADDRESS4 SERVER_IP_DHCP SERVER_IP_DHCP2
 112         SERVER_IP_DHCP3 SERVER_IP_DHCP4 SERVER_IP_GATEWAY SERVER_IP_GATEWAY2
 113         SERVER_IP_GATEWAY3 SERVER_IP_GATEWAY4 SERVER_IP_NETMASK
 114         SERVER_IP_NETMASK2 SERVER_IP_NETMASK3 SERVER_IP_NETMASK4
 115         SERVER_LOCATION SERVER_MAC_ADDRESS SERVER_MAC_ADDRESS2
 116         SERVER_MAC_ADDRESS3 SERVER_MAC_ADDRESS4 SERVER_MAX_LAN_ADAPTER
 117         SERVER_OS SERVER_OS_VENDOR);
 118
 119 sub _crc16 {
 120         my $str = shift;
 121         my $crc = 0;
 122         for my $k (0..length($str)-1) {
 123                 $crc ^= ord(substr($str, $k, 1)) << 8;
 124                 for (0..7) {
 125                         $crc = (($crc & 0x8000) == 32768 ? ($crc<<1) ^ 0x1021 : $crc<<1);
 126                 }
 127         }
 128         $crc = $crc & 0xFFFF;
 129         return $crc;
 130 }
 131
 132 sub _hash {
 133         my ($password, $challenge) = @_;
 134         my @challenge_bytes = unpack 'c16', decode_base64($challenge);
 135         my @pwd_hash            = unpack 'c16', md5($password);
 136         my @xor_bytes;
 137         for my $i (0..15) {
 138                 $xor_bytes[$i] = $challenge_bytes[$i] ^ $pwd_hash[$i];
 139         };
 140         my $hash = md5(pack 'c16', @xor_bytes);
 141         my $crc = _crc16($hash);
 142         $hash .= chr($crc & 0xff) . chr($crc >> 8 & 0xff);
 143         return encode_base64($hash, "");
 144 }
 145
 146 sub _req {
 147         my $xml = shift;
 148         $request = HTTP::Request->new(POST => "http://${host}/cgi/bin");
 149         $request->header(Cookie => "sid=$sid");
 150         $request->content_type('application/x-www-form-urlencoded');
 151         $request->content($xml);
 152         $response = $ua->request($request);
 153         die("Error in request: " . $response->status_line . "\n") unless ($response->is_success);
 154         XMLin($response->content);
 155 }
 156
 157 sub _getprop {
 158         my $property = shift;
 159
 160         my $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="propget"><PROPLIST><PROP NAME="'.$property.'"/></PROPLIST></REQ></RMCSEQ>';
 161         my $resp = _req($reqstr);
 162
 163         if ($resp->{RESP}->{RC} ne '0x0') {
 164                 $resp->{RESP}->{RC};
 165         } else {
 166                 $resp;
 167         }
 168 }
 169
 170 sub logout {
 171         print "Logout\n";
 172         my $request = HTTP::Request->new(GET => "http://${host}/cgi/logout");
 173         $request->header(Cookie => "sid=$sid");
 174         my $response = $ua->request($request);
 175         die("While trying to logout: " . $response->status_line . "\n") unless ($response->is_success);
 176
 177         my $xmlin = XMLin($response->decoded_content);
 178         die "Error logging out: ".$xmlin->{RC} if ($xmlin->{RC} ne '0x0');
 179 }
 180
 181 sub setprop {
 182         my $property = shift;
 183         my $value = shift;
 184
 185         my $oldval = _getprop($property)->{RESP}->{PROPLIST}->{PROP}->{VAL};
 186
 187         if ($value eq $oldval) {
 188                 print "${property} is already ${value}\n";
 189                 return;
 190         }
 191
 192         my $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="propset"><PROP NAME="'.$property.'"><VAL>'.$value.'</VAL></PROP></REQ></RMCSEQ>';
 193         my $res = _req($reqstr);
 194
 195         if ($res->{RESP}->{RC} ne '0x0') {
 196                 print "Error setting ${property} to ${value}: ".$res->{RESP}->{RC}."\n";
 197         } else {
 198                 print "${property}: ${oldval} -> ${value}\n";
 199         }
 200 }
 201
 202 sub serveraction {
 203         my $action = shift;
 204
 205         print "${action}...\n";
 206         my $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="serveraction"><ACT>'.$action.'</ACT></REQ></RMCSEQ>';
 207         my $res = _req($reqstr);
 208
 209         if ($res->{RESP}->{RC} ne '0x0') {
 210                 print "FAILED:".$res->{RESP}->{RC}."\n";
 211         }
 212 }
 213
 214 sub showprop {
 215         my $property = shift;
 216
 217         my $phash = _getprop($property)->{RESP}->{PROPLIST}->{PROP};
 218
 219         print "${property}: " . ${phash}->{VAL} . " (" . ${phash}->{PERMS} . ")\n";
 220 }
 221
 222 sub board_properties {
 223         my $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="boardpropget"><PROPLIST><PROP NAME=""/></PROPLIST></REQ></RMCSEQ>';
 224         my $resp = _req($reqstr);
 225
 226         print " * Board Properties:\n";
 227         foreach my $bprop (@{$resp->{RESP}->{BPROPLIST}->{BPROP}}) {
 228                 print " * " . ${bprop}->{NAME} . ": " . ${bprop}->{VAL} . "\n";
 229         }
 230 }
 231
 232 sub show_all_vars {
 233         foreach my $fwvar (@fw_vars) {
 234                 showprop($fwvar);
 235         }
 236 }
 237
 238 sub syslog_debug {
 239         my $destination_ip = shift;
 240         my $bcast = shift;
 241
 242         $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="dbgmsglancfg"><IP>'.${destination_ip}.'</IP><BCAST>'.${bcast}.'</BCAST><STORE>FALSE</STORE></REQ></RMCSEQ>';
 243         $res = _req($reqstr);
 244         if ($res->{RESP}->{RC} ne '0x0') {
 245                 print "FAILED:".$res->{RESP}->{RC}."\n";
 246                 return;
 247         }
 248
 249         $reqstr='<?XML version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="dbgmsgcfg"><ON>TRUE</ON><CHANNELMASK>0x1</CHANNELMASK><MMASK>0x1</MMASK><STORE>FALSE</STORE></REQ></RMCSEQ>';
 250         $res = _req($reqstr);
 251         if ($res->{RESP}->{RC} ne '0x0') {
 252                 print "FAILED:".$res->{RESP}->{RC}."\n";
 253                 return;
 254         }
 255
 256         print "Debug messages will be sent to ${destination_ip} (broadcast: ${bcast})\n";
 257 }
 258
 259 #Login...
 260 my $response = $ua->get("http://${host}/cgi/challenge");
 261 die $response->status_line if (!($response->is_success));
 262
 263 my $xmlin = XMLin($response->decoded_content);
 264 die "Error getting Challenge: ".$xmlin->{RC} if ($xmlin->{RC} ne '0x0');
 265 my $challenge = $xmlin->{CHALLENGE};
 266 print "Challenge: ${challenge}\n";
 267
 268 $sid = $response->headers->header('Set-Cookie');
 269 die "No SessionID!" if (!defined($sid));
 270 chomp($sid);
 271 $sid =~ s/.*sid=(.*);.*/$1/;
 272 print "SID: ${sid}\n";
 273
 274 my $login_hash = _hash($pass, $challenge);
 275 print "Hash: ${login_hash}\n";
 276
 277 my $request = HTTP::Request->new(GET => "http://${host}/cgi/login?user=${user}&hash=${login_hash}");
 278 $request->header(Cookie => "sid=$sid");
 279 $response = $ua->request($request);
 280 die("While trying to login: " . $response->status_line . "\n") unless ($response->is_success);
 281
 282 $xmlin = XMLin($response->decoded_content);
 283 die "Error logging in: ".$xmlin->{RC} if ($xmlin->{RC} ne '0x0');
 284
 285 $reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="boardpropget"><BPROPLIST><BPROP NAME="BOARD_DESCRIPTION"/></BPROPLIST></REQ></RMCSEQ>';
 286 my $boarddesc64 = _req($reqstr)->{RESP}->{BPROPLIST}->{BPROP}->{VAL};
 287 my $boarddesc = decode_base64($boarddesc64);
 288 my @board = split(//, $boarddesc);
 289 foreach my $byte (@board) {
 290         printf ("0x%02x ", ord($byte));
 291 }
 292 print "\n";
 293 printf("byte 22: 0x%x\n", ord($board[22]));
 294
 295 #showprop("FP_REMOTE_POWER");
 296 #showprop("FP_REMOTE_BOOT");
 297 #showprop("SERVER_HARD_RESET_VIA_IPMI");
 298 #showprop("SERVER_HARD_RESET_PULSE_MS");
 299 #showprop("SERVER_POWER_CHANGE_VIA_IPMI");
 300 #showprop("SERVER_POWER_ON_MODE");
 301 #showprop("SERVER_POWER_ON_PULSE_MS");
 302 #showprop("SERVER_POWER_OFF_MODE");
 303 #showprop("SERVER_POWER_OFF_PULSE_MS");
 304
 305 board_properties();
 306
 307 #show_all_vars();
 308
 309 syslog_debug("255.255.255.255", "TRUE");
 310
 311 #server_power_on modes: (com/agilent/rmc/mgui/panels/PowerMgmtConf.class)
 312 #0: l_pmconf_option_disabled
 313 #1: l_pmconf_option_atx
 314 #2: l_pmconf_option_relay
 315 #default: disabled
 316
 317 my $pmode = 2;
 318
 319 setprop("SERVER_HARD_RESET_VIA_IPMI", "FALSE");
 320 setprop("SERVER_POWER_CHANGE_VIA_IPMI", "FALSE");
 321 #Power Mgmt. Pane
 322 setprop("FP_REMOTE_POWER", "TRUE");
 323 #PM Mode
 324 setprop("SERVER_POWER_ON_MODE", sprintf("0x%x", $pmode));
 325 setprop("SERVER_POWER_OFF_MODE", sprintf("0x%x", $pmode));
 326 #Hack: Abuse powercycloe for powerup and down...
 327 #setprop("SERVER_POWER_ON_PULSE_MS", "0x0");
 328
 329 #$reqstr='<?xml version="1.0"?><?RMCXML version="1.0"?><RMCSEQ><REQ CMD="boardpropset"><BPROP NAME="BOARD_DESCRIPTION"><VAL>'.$boarddesc_new.'</VAL></BPROP></REQ></RMCSEQ>';
 330 #print $reqstr."\n";
 331 #print Dumper(_req($reqstr));
 332
 333 serveraction("hardreset");
 334 serveraction("powerup");
 335 serveraction("powerdown");
 336 serveraction("powercycle");
 337
 338 logout();