Skip to content

Instantly share code, notes, and snippets.

@colstrom
Created May 30, 2019 22:23
Show Gist options
  • Save colstrom/c3e13868831b3b577aef4656864664e4 to your computer and use it in GitHub Desktop.
Save colstrom/c3e13868831b3b577aef4656864664e4 to your computer and use it in GitHub Desktop.
SuperMicro IPMI RADIUS Notes

Shared secrets longer than 32 characters will be silently truncated to 32 characters.

Since only the password is encrypted in the Access-Request packet, this can appear in debugging logs (radiusd -xxx or -xxxx) as strange passwords.

Using a mostly-default configuration (enabling the rest module, with method = post and body = json), these can appear in the request body as a User-Password of some 16-character/27-byte unicode string.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment