Home / server / Questions / 358158
Accepted
Silver Quettier
Asked: 2012-02-09 12:22:21 +0800 CST

Running ipmitool as a non-root user

  • 772

I want to monitor some hardware-related data on a headless CentOS6 server. More specifically, things like voltages, fan speeds, thermal data...

Since the server is headless, the best way I found to do this is through a php script that would format results from ipmitool in a nice manner.

Of course, the webserver user is not root, that would be bad. Sadly, it seems a non-root user has no rights to access /dev/ipmi*, which also makes sense.

Running ipmitool -U "someUser" -P "somePassword" sdr gives me the expected readings as root, but returns 

Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such file or directory
Get Device ID command failed
Unable to open SDR for reading

when I'm logged in as the webserver.

I searched a bit here and there, and was interested in devfs.rules, but it seems it's not present on CentOS6, and I'm not familiar with mounting /dev-related things anyway.

Could anyone point me in the right direction ?

centos ipmi ipmitool centos6

1 Answers

  1. Best Answer

    /dev/ipmi* is usually restricted to root only as you've found. Your options for running ipmitool as a non-root user are (in rough order of my personal preference):

    1. Use sudo (you can create an entry in sudoers specifically for people who should be allowed to run just ipmitool if you don't want to also give them generally unrestricted sudo access)

    2. Modify your udev rules so the device is accessible by another user/group (I do not know where the udev rules are kept on CentOS 6, but look around under /etc for something that fits the bill). This is the same approach as editing devfs.rules - The CentOS documentation will lead you in the right direction and this page (or some creative googling) will help you out with the udev syntax. (I'd give you pointers but I'm barely conversant in it myself :x)

    3. Connect to the IPMI interface over the network (if your IPMI interface supports this).
      This may require burning a network interface and crossover cable, or connecting the IPMI card to your network, which is why it's so low on the list.

    4. Make ipmitool setuid-root.
      (Yeah. Don't do that. It's generally a bad idea and terrible advice - pretend I didn't mention it.)

    • 6