Activate session error requested privilege level exceeds limit

Under Linux, the ipmitool command (http://ipmitool.sourceforge.net/) can be used for configuring IPMI for a server.

Contents

Hardware and Software Requirements

The following example will show how to configure IPMI on a Linux server. The /dev/ipmi0 device file must exist so that configuration can be carried out. If it does not exist, you can create it as follows:

• under SuSE, Red Hat or CentOS: /etc/init.d/ipmi start (requires the OpenIMPI package. The OpenIPMI-tools package will be required later, as well.)
• under Debian 4: /usr/share/ipmitool/ipmi.init.basic (If the error message, ipmi_kcs_drv not found, appears, you will have to comment the corresponding if-condition out, see also [1].)
• under Debian 5: modprobe ipmi_devintf; modprobe ipmi_si

The approach described below has been tested on an Intel SR2500 under CentOS 4 using ipmitool version 1.8.7. In principle, the configuration should be configured similarly on other systems with IPMI support.

LAN Configuration

The first IPMI LAN channel will now be configured. Thereby, the configured IP address can be accessed at the first LAN port for the server. For the default gateway, both its IP address and MAC address must be configured.

When configuring LANs, older versions of ipmitool would not automatically reset Set in Progress to Set Complete. This can be done manually using a raw command (regarding this, see http://www.mail-archive.com/ipmitool-devel@lists.sourceforge.net/msg00095.html)

ipmitool lan print 1

You can check the configuration using ipmitool lan print 1 .

User Configuration

A user will now be setup with admin rights.

The server can now be controlled by this user as described in Using ipmitool for Remote Control of Servers.

Users at the USER Privilege Level

If a user should only be used for querying sensor data, a custom privilege level can be setup for that. This user does not then have any rights for activating or deactivating the server, for example. A user named monitor will be created for this in the following example:

The importance of the various privilege numbers will be displayed when ipmitool channel is called without any additional parameters:

The user just created (named ‘monitor’) has been assigned the USER privilege level. So that LAN access is allowed for this user, you must activate MD5 authentication for LAN access for this user group (USER privilege level):

MD5 will now also be listed as User Auth Type Enable for LAN Channel 1:

Please specify the option «-L USER» for ipmitool when using a user with USER privilege. Otherwise you will get an error message stating:

Источник

On Thu, 19 Aug 2004, Duncan Laurie wrote:
> On Wed, 2004-08-18 at 15:00 -0700, Itzik Ziv wrote:
> > Hi All,
> > 
> >  
> > 
> > I am trying to run this simple ipmi command:
> > 
> > ?ipmitool -v -I lan -H 10.0.0.124 -U admin -P admin -v chassis status?
> > 
> > and it failed to establish a session. This is the output: 
> > 
> > ?Activate Session error: Requested privilege level exceeds limit?
> > 
> > ?Error: Unable to establish LAN session?
> > 
> 
> This is an odd response to get.  Can I get you to try the 1.6.0 snapshot
> I put up at http://ipmitool.sourceforge.net/snapshot ?  There has been
> some reworking of the code in this area and I want to make it wasn't a
> side effect of a different bug.
> 

I was incorrect here, this could be a perfectly normal response.
The Get Authentication Capabilities command will return the maximum
supported privilege level of the channel, not the user.  So if the
admin user is not configured with high enough privilege level on
that channel it will not connect.

You will still need to get the 1.6.0 snapshot above, but this time
you want to use the "user" command with channel 2 to list the users:

ipmitool -I open user list 2

And then the "channel" command with the admin userid to configure
the privilege level for the channel: (example assumes admin is ID 1)

ipmitool -I open channel setaccess 2 1 privilege=4

-duncan

Under Linux, the ipmitool command (http://ipmitool.sourceforge.net/) can be used for configuring IPMI for a server.

Hardware and Software Requirements

The following example will show how to configure IPMI on a Linux server. The /dev/ipmi0 device file must exist so that configuration can be carried out. If it does not exist, you can create it as follows:

• under SuSE, Red Hat or CentOS: /etc/init.d/ipmi start (requires the OpenIMPI package. The OpenIPMI-tools package will be required later, as well.)
• under Debian 4: /usr/share/ipmitool/ipmi.init.basic (If the error message, ipmi_kcs_drv not found, appears, you will have to comment the corresponding if-condition out, see also [1].)
• under Debian 5: modprobe ipmi_devintf; modprobe ipmi_si

The approach described below has been tested on an Intel SR2500 under CentOS 4 using ipmitool version 1.8.7. In principle, the configuration should be configured similarly on other systems with IPMI support.

LAN Configuration

The first IPMI LAN channel will now be configured. Thereby, the configured IP address can be accessed at the first LAN port for the server. For the default gateway, both its IP address and MAC address must be configured.

[root@sr2500 ~]# ipmitool lan set 1 ipsrc static
[root@sr2500 ~]# ipmitool lan set 1 ipaddr 192.168.1.211
Setting LAN IP Address to 192.168.1.211
[root@sr2500 ~]# ipmitool lan set 1 netmask 255.255.255.0
Setting LAN Subnet Mask to 255.255.255.0
[root@sr2500 ~]# ipmitool lan set 1 defgw ipaddr 192.168.1.254
Setting LAN Default Gateway IP to 192.168.1.254
[root@sr2500 ~]# ipmitool lan set 1 defgw macaddr 00:0e:0c:aa:8e:13
Setting LAN Default Gateway MAC to 00:0e:0c:aa:8e:13
[root@sr2500 ~]# ipmitool lan set 1 arp respond on
Enabling BMC-generated ARP responses
[root@sr2500 ~]# ipmitool lan set 1 auth ADMIN MD5
[root@sr2500 ~]# ipmitool lan set 1 access on

When configuring LANs, older versions of ipmitool would not automatically reset Set in Progress to Set Complete. This can be done manually using a raw command (regarding this, see http://www.mail-archive.com/ipmitool-devel@lists.sourceforge.net/msg00095.html)

[root@sr2500 ~]# ipmitool lan print 1
Set in Progress         : Set In Progress
[...]
[root@sr2500 ~]# ipmitool raw 0x0c 1 1 0 0

ipmitool lan print 1

You can check the configuration using ipmitool lan print 1.

[root@sr2500 ~]# ipmitool lan print 1
Set in Progress         : Set Complete
Auth Type Support       : NONE MD5 PASSWORD 
Auth Type Enable        : Callback : 
                        : User     : 
                        : Operator : 
                        : Admin    : MD5 
                        : OEM      : 
IP Address Source       : Static Address
IP Address              : 192.168.1.211
Subnet Mask             : 255.255.255.0
MAC Address             : 00:0e:0c:ea:92:a2
SNMP Community String   : 
IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl   : 2.0 seconds
Default Gateway IP      : 192.168.1.254
Default Gateway MAC     : 00:0e:0c:aa:8e:13
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
RMCP+ Cipher Suites     : None
Cipher Suite Priv Max   : XXXXXXXXXXXXXXX
                        :     X=Cipher Suite Unused
                        :     c=CALLBACK
                        :     u=USER
                        :     o=OPERATOR
                        :     a=ADMIN
                        :     O=OEM
[root@sr2500 ~]# 

User Configuration

A user will now be setup with admin rights.

[root@sr2500 ~]# ipmitool user set name 2 admin
[root@sr2500 ~]# ipmitool user set password 2
Password for user 2: 
Password for user 2: 
[root@sr2500 ~]# ipmitool channel setaccess 1 2 link=on ipmi=on callin=on privilege=4
[root@sr2500 ~]# ipmitool user enable 2
[root@sr2500 ~]# 

The server can now be controlled by this user as described in Using ipmitool for Remote Control of Servers.

Users at the USER Privilege Level

If a user should only be used for querying sensor data, a custom privilege level can be setup for that. This user does not then have any rights for activating or deactivating the server, for example. A user named monitor will be created for this in the following example:

[root@sr2500 ~]# ipmitool user set name 3 monitor
[root@sr2500 ~]# ipmitool user set password 3
Password for user 3: 
Password for user 3: 
[root@sr2500 ~]# ipmitool channel setaccess 1 3 link=on ipmi=on callin=on privilege=2
[root@sr2500 ~]# ipmitool user enable 3
[root@sr2500 ~]# ipmitool channel getaccess 1 3
Maximum User IDs     : 15
Enabled User IDs     : 2

User ID              : 3
User Name            : monitor
Fixed Name           : No
Access Available     : call-in / callback
Link Authentication  : enabled
IPMI Messaging       : enabled
Privilege Level      : USER
[root@sr2500 ~]# 

The importance of the various privilege numbers will be displayed when ipmitool channel is called without any additional parameters:

[root@sr2500 ~]# ipmitool channel
Channel Commands: authcap   <channel number> <max privilege>
                  getaccess <channel number> [user id]
                  setaccess <channel number> <user id> [callin=on|off] [ipmi=on|off] [link=on|off] [privilege=level]
                  info      [channel number]
                  getciphers <ipmi | sol> [channel]

Possible privilege levels are:
   1   Callback level
   2   User level
   3   Operator level
   4   Administrator level
   5   OEM Proprietary level
  15   No access
[root@sr2500 ~]# 

The user just created (named ‘monitor’) has been assigned the USER privilege level. So that LAN access is allowed for this user, you must activate MD5 authentication for LAN access for this user group (USER privilege level):

[root@sr2500 ~]# ipmitool lan set 1 auth USER MD5
[root@sr2500 ~]# 

MD5 will now also be listed as User Auth Type Enable for LAN Channel 1:

[root@sr2500 ~]# ipmitool lan print 1
Set in Progress         : Set Complete
Auth Type Support       : NONE MD5 PASSWORD 
Auth Type Enable        : Callback : 
                        : User     : MD5 
                        : Operator : 
                        : Admin    : MD5 
                        : OEM      : 
IP Address Source       : Static Address
IP Address              : 192.168.1.211
Subnet Mask             : 255.255.255.0
MAC Address             : 00:0e:0c:ea:92:a2
SNMP Community String   : 
IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl   : 2.0 seconds
Default Gateway IP      : 192.168.1.254
Default Gateway MAC     : 00:0e:0c:aa:8e:13
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
RMCP+ Cipher Suites     : 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14
Cipher Suite Priv Max   : XXXXXXXXXXXXXXX
                        :     X=Cipher Suite Unused
                        :     c=CALLBACK
                        :     u=USER
                        :     o=OPERATOR
                        :     a=ADMIN
                        :     O=OEM
[root@sr2500 ~]# 

Please specify the option «-L USER» for ipmitool when using a user with USER privilege. Otherwise you will get an error message stating:

Activate Session error: Requested privilege level exceeds limit

Author: Werner Fischer

Unable to access an error message corresponding to your field name Address.(Anonymous function) #3908

Comments

jamieburchell commented Jun 12, 2015

Above error is shown when a field has no value and no required rule:

Same error using this format:

The text was updated successfully, but these errors were encountered:

shefi commented Jun 14, 2015

Have you tried setting the rules like this?

jamieburchell commented Jun 14, 2015

Sure, but my examples are also supposed to work according to the documentation.

Nitin-Tec commented Jun 15, 2020

public function sendmail()
<
$this->form_validation->set_rules(‘username’,’Username’,’required|alpha’);
$this->form_validation->set_rules(‘password’,’Password’,’required|max_length[12]’);
$this->form_validation->set_rules(‘firstname’,’Firstname’,’required|trim|alpha’);
$this->form_validation->set_rules(‘lastname’,’Lastname’,’required|trim|alpha’);
$this->form_validation->set_rules(’email’,’Email’,’required|valid_email|is_unique[user.email]’);
$this->form_validation->set_rules(‘dateofbirth’,’DOB’,’required|’);
$this->form_validation->set_rules(‘phn’,’Phone Number’,’required|numeric|max_length[12]’);
$this->form_validation->set_error_delimiters(‘

sir can you suggest what is the reason why comes this error

Источник

Terrapins Sky

Wednesday, February 17, 2016

[Codeigniter 2][Resolved] Unable to access an error message corresponding to your field name

function _article_valid() <
$this->load->helper(array(‘form’, ‘url’));
$this->load->library(‘form_validation’);
$this->form_validation->set_rules(‘title’, ‘Title’, ‘required’);
$this->form_validation->set_rules(‘url’, ‘Url’, ‘callback_url_check’);
return $this->form_validation->run();
>

function url_check($url) <
if ($url == ‘test’) <
$this->form_validation->set_message( ‘url’ , ‘The field can not be the word «test»‘);
return FALSE;
>else <
return TRUE;
>
>

And i found the problem is caused by the text in red with yellow background shown above.

Firstly, according example code shown at official site, that value same as the callback function name, and also same as function name after «callback_» rule prefix :

and then I change the first argument of set_message which’s same as the callback function name and found its work.

function url_check ($url) <
if ($url == ‘test’) <
$this->form_validation->set_message(‘ url_check ‘, ‘The field can not be the word «test»‘);
return FALSE;
>else <
return TRUE;
>
>

function _article_valid() <
$this->load->helper(array(‘form’, ‘url’));
$this->load->library(‘form_validation’);
$this->form_validation->set_rules(‘title’, ‘Title’, ‘required’);
$this->form_validation->set_rules(‘pwd’, ‘pwd’, ‘callback_ pwd_valid ‘);
return $this->form_validation->run();
>

function pwd_valid ($pwd) <
if ($pwd == ‘test’) <
$this->form_validation->set_message(‘ pwd_valid ‘, ‘The field can not be the word «test»‘);
return FALSE;
>else <
return TRUE;
>
>

function url_check($url) <
if ($url == ‘test’) <
$this->form_validation->set_message( __FUNCTION__ , ‘The field can not be the word «test»‘);
return FALSE;
>else <
return TRUE;
>
>

Источник

I am getting the «Field [FIELD_NAME] cannot be set. It is not on the appropriate screen, or is unknown» error

I am getting the «Field [FIELD_NAME] cannot be set. It is not on the appropriate screen, or is unknown» error

Environment

Cause

If the issue involves a Custom Field ID, we will first need to find the name of the field (if not, you can skip the following steps):

Navigate to Administration > Issues >Custom Fields.

Go to the Cog Icon (Jira Server) or the ellipsis (Jira Cloud) and hover over the Configure or Screens option.

Observe the URL at the bottom left of the browser window. You will find the ID at the end of the link.
Example:

To add the Field to the corresponding Screen:

Open the Project where the issue is happening.

Go to Project Settings.

Click on Screens.

Click on the name of your screen to expand. You should see something like the screen below:

Click on the name of the screen next to Create issue.