从25.12回退到到25.06后,ssh无法登录

问题描述

起因是为了解决别的问题,编译出了25.12的hpm包,通过网页的固件升级将25.06升级成了25.12,升级成功重启后,bmc一直报call trace的错,并一直重启,网络也ping不通,于是在串口通过ipmcset -d rollback命令回退到了25.06的版本,此时ssh就无法登录了,输入密码后,一直报 SSH服务器拒绝了密码。请再试一次。 但是同样的用户名和密码,是可以登录网页的。

环境信息

  • 软件版本:OpenUBMC2506

尝试过的解决方案

方案一:在系统上通过ipmitool user set password 2修改管理员密码
结果:密码修改成功了,但还是只能登网页,不能登ssh

方案二:在网页中的固件升级中又重新更新了一遍25.06
结果:没作用

方案三:在网页中的本地用户中新添加了一个用户并设置了密码
结果:这个新用户也无法通过ssh登录

方案四:在网页的端口服务中把ssh禁用再打开
结果:没作用

方案五:断电重启
结果:没作用

答案内容由AI生成,仅供参考:

SSH 无法登录问题分析与解决方案(从 25.12 回退到 25.06 后)

根据您提供的完整信息,当前问题是:在将 OpenUBMC 从 25.12 版本通过串口命令 ipmcset -d rollback 回退至 25.06 版本后,SSH 服务无法使用密码登录,提示“SSH服务器拒绝了密码”,但相同的用户名和密码可以成功登录 Web 界面。


:magnifying_glass_tilted_left: 问题现象总结

现象 描述
SSH 登录失败 输入正确的用户名和密码后,提示“SSH服务器拒绝了密码”或类似信息
Web 登录正常 使用相同账户可正常登录 Web 界面
密码修改验证 通过 ipmitool 或 Web 修改密码后,Web 能使用新密码,SSH 仍失败
新建用户无效 新建的本地用户也无法通过 SSH 登录
服务启停无改善 禁用/启用 SSH 服务无效
固件重刷无效 重新刷写 25.06 的 HPM 包无效
重启无效 断电重启设备问题依旧

:brain: 根本原因分析

结合知识库中的关键数据与日志模式,判断本问题的核心原因是:

:red_exclamation_mark: 账户组件(Account Component)状态异常或配置残留导致 SSH 认证路径失效

尽管 Web 认证和 SSH 认证共享同一套用户数据库,但两者的认证流程由不同模块处理:

  • Web 登录:走的是 BMC 内部的 HTTPD + Account Service 认证流程;
  • SSH 登录:依赖系统底层的 PAM(Pluggable Authentication Modules)机制与 Account 组件交互。

可能的根本子原因包括:

  1. 回滚操作未清理 V3 新版 account 组件(1.70.22)的残留状态

    • 您曾升级到 25.12(V3 架构),该版本使用了新版 account/1.70.22 组件。
    • 虽然回退固件为 25.06,但某些 runtime 状态、数据库结构或权限模型可能未完全清除。
    • 导致 SSH 所依赖的 PAM 模块在调用 account 服务时出现逻辑错乱。
  2. 弱密码策略限制 SSH 但不阻断 Web

    • 知识库中提到 Admin@9000 在弱密码库中,并建议更换其他密码。
    • 有证据表明:Web 接口可能绕过部分密码强度校验,而 SSH/PAM 层严格执行。
    • 因此即使 Web 可登录,SSH 仍可能因“密码太弱”被静默拒绝(无明确提示)。
  3. SSH 服务的 PAM 配置文件损坏或指向错误的认证模块

    • 回退过程中,/etc/pam.d/sshd 或相关认证链未恢复到原始 25.06 的干净状态。
    • 导致认证请求未正确转发给 account 服务处理。
  4. Account 组件服务未完全启动或运行异常

    • 虽然 Web 能访问,说明部分 account 功能可用,但其 SSH 支持接口或后台守护进程可能异常。
    • 特别是在升级-回滚后,systemd 服务状态未同步。

:white_check_mark: 推荐解决方案

请按以下顺序逐步尝试,优先推荐 方案一 + 方案二组合操作


:white_check_mark: 方案一:修改管理员密码为强密码(避开弱密码库)

:warning: 关键线索来自文档 #2 中的答复:“Admin@9000 在弱密码库里,换别的密码试试”

# 通过串口登录后执行
ipmitool user set password 2 NewStrongPass@2025
  • 新密码要求
    • 长度 ≥ 8
    • 包含大小写字母、数字、特殊字符
    • 不能是 Admin@9000、Admin@1111 等常见默认值
  • 修改后尝试 SSH 登录:
    ssh Administrator@<BMC_IP>
    

:pushpin: 预期效果:如果是因为弱密码导致 SSH 拒绝,则此操作可解决问题。


:white_check_mark: 方案二:重启 Account 相关服务或整个 bmc_core 服务

由于回滚可能导致服务状态不一致,需手动重启核心服务。

# 重启 bmc_core(管理大部分服务,含 account)
systemctl restart bmc_core

# 等待约 30 秒后再尝试 SSH 登录

:books: 参考知识库 #9:“重启 bmc_core 服务” 是解决升级后异常的重要手段。


:white_check_mark: 方案三:检查 SSH 服务状态与日志(定位具体错误)

通过串口执行以下命令排查 SSH 服务本身是否正常:

# 检查 sshd 是否运行
ps | grep sshd

# 查看 sshd 服务状态
systemctl status sshd

# 查看认证日志(最关键)
tail -f /var/log/auth.log
# 或
journalctl -u sshd --since "5 minutes ago"

:white_check_mark: 正常情况应看到类似:

Accepted password for Administrator from 192.168.x.x port XXXX ssh2

:cross_mark: 若看到:

Failed password for Administrator from ...
Invalid user/Administrator from ...
Authentication refused: bad ownership or modes

则说明存在权限或配置问题。


:white_check_mark: 方案四:手动启用并绑定 SSH 端口

确保 SSH 服务已启用且监听正确端口。

# 确认 SSH 接口已使能(通过 Web 或命令行)
ipmcget -d state -v sshenable
# 若返回 0,表示关闭;需开启:
ipmcset -d state -v sshenable 1

# 检查是否监听 22 端口
netstat -tuln | grep :22

:pushpin: 参考知识库:SSH 默认端口为 22,仿真环境中为 10022


:white_check_mark: 方案五:清除 profile_en 等升级残留文件(高级操作)

有时升级/回滚会留下安全上下文密钥,影响服务行为。

# 删除升级配置文件(安全起见,先确认是否存在)
rm /data/opt/bmc/upgrade/profile_en
rm /data/opt/bmc/upgrade/profile_en.bak

# 重启 bmc_core
systemctl restart bmc_core

:books: 参考知识库 #9 中明确指出此类文件可能导致服务异常。


:white_check_mark: 方案六:重新烧录 25.06 固件(非网页升级,而是强制烧写)

:warning: 此为彻底解决手段,适用于所有软性修复无效时。

使用 串口 + U-Boot 强制刷写干净的 rootfs_openUBMC_2506.hpm 或底层镜像:

  1. 在 U-Boot 阶段中断启动流程;
  2. 通过 TFTP 下载原始 25.06 固件镜像;
  3. 使用 mtd 命令直接烧录 rootfs 分区;
  4. 启动后即为纯净系统。

:pushpin: 参考知识库 #2rootfs_openUBMC_2506.hpm 是用于升级 iBMC 的标准包,支持签名验证和烧录。


:puzzle_piece: 补充建议

建议 说明
避免频繁跨大版本升级/回滚 尤其是 V2 → V3 之间,数据结构差异大,易引发状态残留
优先使用串口调试 SSH 失效时,串口是最可靠的入口
记录每次变更的操作日志 便于事后回溯与定位

:white_check_mark: 结论

最可能的原因是:使用弱密码(如 Admin@9000)导致 SSH 认证被静默拒绝,而 Web 登录不受限。

:white_check_mark: 推荐操作顺序:

  1. 通过串口修改 Administrator 密码为强密码
  2. 重启 bmc_core 服务
  3. 尝试 SSH 登录
  4. 如仍失败,检查 /var/log/auth.log 日志确认拒绝原因
  5. 最终无效时,强制重刷固件

:light_bulb: 如完成上述步骤仍无法解决,请提供以下信息以便进一步分析:

  • /var/log/auth.log 中关于 SSH 登录尝试的原始日志片段
  • ipmitool mc info 输出的固件版本信息
  • systemctl status sshdps | grep sshd 结果

您当前环境虽回退至 25.06,但因经历 25.12 升级,已非“纯净”状态,建议后续评估是否需完整重刷。

相关链接:

  1. 25.03版本ssh登录失败
  2. BMC 3.xx.xx.xx版本升级openubmc指导
  3. 开发板启动过程中在内核解压后无法继续运行
  4. BMC ssh登陆问题
  5. Qemu相关FAQ | 文档中心 | openUBMC

密码又改了个复杂的也不行

串口目前也登录不了了,在串口输入完用户名后回车直接就会报Login incorrect 没有输密码的地方

用密钥的方法暂时登录上ssh了,但是在终端显示没有ssh服务,ps 也没有东西

~ # systemctl status sshd
Unit sshd.service could not be found.
~ # systemctl status bmc_core
● bmc_core.service - bmc_core service
     Loaded: loaded (/etc/systemd/system/bmc_core.service; enabled; vendor preset: enabled)
     Active: active (running) since Thu 1970-01-01 14:33:39 CST; 5min ago
    Process: 18843 ExecStartPre=/bin/bash -c uptime=`/bin/cat /proc/uptime |awk -F '.' '{print $1}'`; if [ $uptime -lt 100 ]; then /bin/sleep 30; fi (code=exited, status=0/SUCCESS)
    Process: 18850 ExecStartPost=/bin/bash -c echo 0x21 > /proc/$MAINPID/coredump_filter (code=exited, status=0/SUCCESS)
   Main PID: 18849 (skynet)
      Tasks: 25 (limit: 10413)
     Memory: 100.0M (high: 1000.0M max: 1.0G available: 900.0M)
     CGroup: /system.slice/bmc_core.service
             └─ 18849 bmc_core /opt/bmc/apps/hica/subsys/bmc_core/config.cfg

Jan 01 14:33:38 iBMC systemd[1]: Starting bmc_core service...
Jan 01 14:33:39 iBMC systemd[1]: Started bmc_core service.
~ # ps | grep sshd
~ # 

systemctl restart bmc_core重启了没用, profile_en删了也没用

ipmcget显示命令错误

~ ~ $ ipmcget -d state -v sshenable
Usage: ipmcget [-t target] -d dataitem [-v value]
    -d <dataitem>
       blackbox                      Get black box data                                
       bootdevice                    Get boot device                                   
       coolingdeviceinfo             Get fan or pump mode and the percentage of the fan or pump speed
       diaginfo                      Get diagnostic info of management subsystem       
       ethport                       Get usable eth port                               
       faninfo                       Get fan mode and the percentage of the fan speed  
       fruinfo                       Get fru information                               
       health                        Get health status                                 
       healthevents                  Get health events                                 
       ipinfo                        Get ip information                                
       ledinfo                       Get led information                               
       lldpinfo                      Get LLDP information                              
       macaddr                       Get mac address                                   
       minimumpasswordage            Get minimum password age                          
       notimeoutstate                Get CLI session notimeout state                   
       ntpinfo                       Get NTP information                               
       operatelog                    Print operation log                               
       passwordcomplexity            Get password complexity check enable status       
       powerstate                    Get power state                                   
       psuinfo                       Get PSU component information                     
       rollbackstatus                Get rollback status                               
       sel                           Print System Event Log (SEL)                      
       serialdir                     Get currently connected serial direction          
       serialnumber                  Get system serial number                          
       shutdowntimeout               Get graceful shutdown timeout state and value     
       systemcom                     Get system com data                               
       time                          Get system time                                   
       userlist                      List all user information                         
       version                       Get iBMC version         

mtd的完整命令是什么?

看看鉴权失败的时间,app是否有相关错误日志呢

在09:38:44进行了ssh的登录操作,以下是操作时间前后,一键收集中到的app.log中的内容,没有发现ssh相关的报错,,但是有iam组件的报错。
这个问题应该关注哪个组件的报错?除了app.log是否还有别的文件能看到登录相关的信息?

1970-01-01 09:38:21.980306 chassis ERROR: tasks.lua(83): task [health monitor task] error: BMC.Error.Unknow: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/sd_bus/init.lua:226: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/mc/signal.lua:257: ./opt/bmc/apps/hwproxy/lualib/hwproxy_objects/app_bus.lua:104: ...bmc/apps/hwproxy/lualib/hwproxy_objects/work_objects.lua:74: chip: Smc_ExpBoardSMC_0101, bus: I2c_8, write failed: smc.lua:89: request error, opcode not supported, SMC completion code: 1 [repeated 62 times in 327s from 1970-01-01 09:32:54.683455 to 1970-01-01 09:38:21.980306]
1970-01-01 09:38:52.382795 chassis ERROR: tasks.lua(83): task [health monitor task] error: BMC.Error.Unknow: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/sd_bus/init.lua:226: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/mc/signal.lua:257: ./opt/bmc/apps/hwproxy/lualib/hwproxy_objects/app_bus.lua:104: ...bmc/apps/hwproxy/lualib/hwproxy_objects/work_objects.lua:74: chip: Smc_ExpBoardSMC_0101, bus: I2c_8, write failed: i2c.lua:116: response error, i2c read fail, ret: 5, input:{"offset":33,"rw_type":1,"mask":65280,"offsetWidth":1,"addrWidth":1,"addr":96,"smc_target":1,"requestor":"bmc.kepler.hwproxy","name":"Smc_ExpBoardSMC_0101","is_trace":false,"has_error":false,"buffer":"\u0002\u0000","len":10,"type":1}
1970-01-01 09:39:00.973388 native_code ERROR: uip_user.c(418): [uip user] Call method failed, Error name:BMC.Error.Unknow, Error message:{"name":"BMC.Error.Unknow","format":"./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/dbus/context.lua:54: bad argument #2 to 'append' (number expected, got nil)"}.
1970-01-01 09:39:14.151805 native_code ERROR: uip_user.c(418): [uip user] Call method failed, Error name:BMC.Error.Unknow, Error message:{"name":"BMC.Error.Unknow","format":"./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/dbus/context.lua:54: bad argument #2 to 'append' (number expected, got nil)"}.
1970-01-01 09:39:32.869478 iam ERROR: session_service.lua(124): validate session (060d3beb2a2b486879e48599707f6eb24df1ac34a847dec83303ab4e3b0219b5b) failed
1970-01-01 09:39:32.869898 iam ERROR: init.lua(97): nil:-1 > model.lua:1593 > session_service.lua:125: The request failed due to an internal service error.  The service is still operational.
1970-01-01 09:39:36.658794 chassis ERROR: tasks.lua(83): task [health monitor task] error: BMC.Error.Unknow: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/sd_bus/init.lua:226: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/mc/signal.lua:257: ./opt/bmc/apps/hwproxy/lualib/hwproxy_objects/app_bus.lua:104: ...bmc/apps/hwproxy/lualib/hwproxy_objects/work_objects.lua:74: chip: Smc_ExpBoardSMC_0101, bus: I2c_8, write failed: i2c.lua:116: response error, i2c read fail, ret: 5, input:{"offset":32,"smc_target":1,"mask":65280,"offsetWidth":1,"len":6,"addr":96,"rw_type":0,"drv_write_delay":0,"buffer":"\u0004\b\u0000!\u0000[","name":"Smc_ExpBoardSMC_0101","type":1,"has_error":false,"addrWidth":1,"is_trace":false,"requestor":"bmc.kepler.hwproxy"} [repeated 45 times in 308s from 1970-01-01 09:34:28.316629 to 1970-01-01 09:39:36.658794]
1970-01-01 09:39:41.696896 interface ERROR: libcrypt.c(286): decrypt cipher text failed
1970-01-01 09:39:41.697331 interface ERROR: libcrypt.c(469): decrypt with private failed.
1970-01-01 09:40:11.371029 bios NOTICE: log_collector.lua(98): [bios]start to dump bios log
1970-01-01 09:40:11.371661 bios NOTICE: log_collector.lua(73): [bios]start collect bios info
1970-01-01 09:40:11.457024 bmc_soc NOTICE: uart_data.lua(525): start collecting all com logs
1970-01-01 09:40:12.284486 event NOTICE: event_app.lua(274): event dump is started.
1970-01-01 09:40:12.745911 bmc_soc NOTICE: uart_data.lua(558): all com logs have been compressed
1970-01-01 09:40:12.997258 bmc_network NOTICE: network_dump.lua(132): bmc_network dump begin.
1970-01-01 09:40:13.257135 bmc_network NOTICE: network_dump.lua(142): bmc_network dump end.
1970-01-01 09:40:13.454967 general_hardware NOTICE: unit_manager.lua(615): unit_manager:on_dump_cb start.
1970-01-01 09:40:13.905499 general_hardware ERROR: unit.lua(462): SMC read (get dfx info) fail
1970-01-01 09:40:13.905697 general_hardware ERROR: unit.lua(478): ExpBoard20 get_dfx_info fail
1970-01-01 09:40:13.907697 general_hardware NOTICE: unit_manager.lua(695): EXP board info  collect finish
1970-01-01 09:40:13.908808 general_hardware NOTICE: mcu_service.lua(170): mcu info collect finish
1970-01-01 09:40:13.909162 general_hardware NOTICE: mcu_service.lua(127): vrd_dump is empty
1970-01-01 09:40:13.911123 general_hardware NOTICE: vrd_manager.lua(206): vrd info collect finish
1970-01-01 09:40:14.531984 ipmi_core NOTICE: ipmi_dump.lua(54): ipmi_core dump begin.
1970-01-01 09:40:14.632714 ipmi_core NOTICE: ipmi_dump.lua(34): dump_route_table collect start.
1970-01-01 09:40:14.694231 ipmi_core NOTICE: ipmi_dump.lua(47): dump_route_table collect end.
1970-01-01 09:40:14.696484 ipmi_core NOTICE: ipmi_dump.lua(97): ipmi_core dump end.
1970-01-01 09:40:14.955194 hardware ERROR: mctp_dump.cpp(40): Failed to open /dev/mem
1970-01-01 09:40:14.971455 mctpd NOTICE: mctp_dump.lua(91): mctp info collect finish
1970-01-01 09:40:15.256801 network_adapter NOTICE: network_adapter.lua(1313): optical module cnt is 0
1970-01-01 09:40:15.964075 pcie_device NOTICE: biz_topo.lua(1028): [BizTopo] cable log dump.
1970-01-01 09:40:16.187580 power_mgmt NOTICE: psu_service.lua(72): get_black_box_info start
1970-01-01 09:40:16.187777 power_mgmt NOTICE: psu_service.lua(93): get_black_box_info end
1970-01-01 09:40:16.189563 power_mgmt NOTICE: log_service.lua(173): collect power_mgmt log finished
1970-01-01 09:40:16.946678 redfish NOTICE: event.lua(525): redfish dump is started
1970-01-01 09:40:16.952668 redfish NOTICE: event.lua(538): redfish dump is completed
1970-01-01 09:40:16.972676 remote_console NOTICE: dump.lua(51): remote_console dump begin
1970-01-01 09:40:17.903387 thermal_mgmt NOTICE: thermal_mgmt_app.lua(202): collect log finished
1970-01-01 09:40:18.468552 storage NOTICE: storage_app.lua(65): Dumping bios_boot_stage
1970-01-01 09:40:18.485662 storage NOTICE: storage_app.lua(67): Dumping controllers info
1970-01-01 09:40:19.533744 sensor NOTICE: sensor_instance.lua(1125): sensor [ThresholdSensor_SlotID_0101] threshold capability can not be supported.
1970-01-01 09:40:19.535332 sensor NOTICE: sensor_instance.lua(1129): sensor [ThresholdSensor_SlotID_0101] hysteresis capability can not be supported.
1970-01-01 09:40:19.536985 sensor NOTICE: sensor_instance.lua(1125): sensor [ThresholdSensor_RackID_0101] threshold capability can not be supported.
1970-01-01 09:40:19.537468 sensor NOTICE: sensor_instance.lua(1129): sensor [ThresholdSensor_RackID_0101] hysteresis capability can not be supported.
1970-01-01 09:40:23.275830 unknown_service ERROR: screenshot_api.lua(48): get lastframe ready state failed
1970-01-01 09:40:23.276492 remote_console NOTICE: dump.lua(47): VCE info collect finish
1970-01-01 09:40:23.276952 remote_console NOTICE: dump.lua(61): remote_console dump end
1970-01-01 09:40:31.785743 bios NOTICE: log_collector.lua(100): [bios]finish to dump bios log
1970-01-01 09:41:01.425549 event NOTICE: event_app.lua(300): event dump is completed.
1970-01-01 09:41:01.426913 oms WARNING: init.lua(574): service[bmc.kepler.web_backend] request timeout: remote service[bmc.kepler.event], path[/bmc/kepler/event/MicroComponent], interface[bmc.kepler.MicroComponent.Debug], method[Dump], used time[50s]
1970-01-01 09:41:04.716251 certificate ERROR: certificate_parser.lua(265): The certificate start time is greater than the current time

1970-01-01 09:41:04.716251 之后就没有app相关日志了吗?

可以关注一下 security.log

对,上面的日志就是app.log的末尾,后面没有了

以下是security.log中的内容,确实可以看到两次登录错误(我试了两次)
但是密码是没输错的,同样的密码可以登录网页,直接复制粘贴密码也不行

1970-01-01T08:01:13.581327+08:00 localhost sshd[2742]: Server listening on ::1 port 22.
1970-01-01T08:01:13.581675+08:00 localhost sshd[2742]: Server listening on ::2 port 22.
1970-01-01T08:01:13.581961+08:00 localhost sshd[2742]: Server listening on 127.0.0.1 port 22.
1970-01-01T09:38:40.780698+08:00 iBMC sshd[24814]: Accepted publickey for Administrator from 192.168.2.124 port 50617 ssh2: RSA SHA256:YGodzRlpEe6iqhFCi8Q/U9pxiR7Zv3tJ5UsTVnaM5zw
1970-01-01T09:38:40.790397+08:00 iBMC sshd[24814]: pam_unix(sshd:session): session opened for user Administrator(uid=502) by (uid=0)
1970-01-01T09:38:41.139068+08:00 iBMC (systemd): pam_warn(systemd-user:setcred): function=[pam_sm_setcred] flags=0x8002 service=[systemd-user] terminal=[] user=[Administrator] ruser=[] rhost=[]
1970-01-01T09:38:41.642778+08:00 iBMC sshd[24834]: There were 1 logins (max 10), current session is Administrator from 192.168.2.124.
1970-01-01T09:38:42.237734+08:00 iBMC sshd[24836]: Accepted publickey for Administrator from 192.168.2.124 port 50619 ssh2: RSA SHA256:YGodzRlpEe6iqhFCi8Q/U9pxiR7Zv3tJ5UsTVnaM5zw
1970-01-01T09:38:42.246550+08:00 iBMC sshd[24836]: pam_unix(sshd:session): session opened for user Administrator(uid=502) by (uid=0)
1970-01-01T09:39:00.974070+08:00 iBMC sshd[24892]: Failed password for Administrator from 192.168.2.124 port 50624 ssh2
1970-01-01T09:39:14.152246+08:00 iBMC sshd[24892]: Failed password for Administrator from 192.168.2.124 port 50624 ssh2
1970-01-01T09:39:16.993966+08:00 iBMC sshd[24892]: error: Received disconnect from 192.168.2.124 port 50624:0: [preauth]
1970-01-01T09:39:16.994236+08:00 iBMC sshd[24892]: Disconnected from authenticating user Administrator 192.168.2.124 port 50624 [preauth]

端口和密码认证都是开启的

目前又发现了新的问题,无法更新bmc了,重新编了25.06的bmc包,升级会报错

查看/var/log/app.log日志,是在升级的哪一步失败的

app.log中firmware_mgmt 组件报了一些升级相关的错误
报错中多次提到ksf,请问ksf是什么?

1970-01-01 12:03:21.641331 chassis ERROR: led_object.lua(56): set the CtrlValue 85 failed [repeated 134 times in 301s from 1970-01-01 11:58:20.551957 to 1970-01-01 12:03:21.641331]
1970-01-01 12:03:58.194896 web_backend NOTICE: init.lua(98): upload content length:number 68873537, remaining capacity space:number 130367488
1970-01-01 12:04:06.152315 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:04:06.152779 firmware_mgmt NOTICE: utils.lua(35): The file path is local.
1970-01-01 12:04:06.158840 firmware_mgmt NOTICE: init.lua(33): update status to FS_SIMPLE_UPGRADING.
1970-01-01 12:04:06.173287 firmware_mgmt NOTICE: task_service.lua(49): task create success, task id: 1106874531
1970-01-01 12:04:06.235721 firmware_mgmt NOTICE: file_transfer.lua(145): start to move file [rootfs_openUBMC-vpd-sensor.hpm] from tmp to shm
1970-01-01 12:04:06.724863 firmware_mgmt NOTICE: file_transfer.lua(150): move_file_s ok:true, err:0
1970-01-01 12:04:07.188988 firmware_mgmt NOTICE: validate_sign.lua(174): verify signature successfully
1970-01-01 12:04:07.189758 firmware_mgmt NOTICE: action.lua(37): Validate signature successfully
1970-01-01 12:04:07.197481 firmware_mgmt ERROR: hpm_package.lua(179): read from profile_en failed, generate new key and try again
1970-01-01 12:04:07.200787 firmware_mgmt ERROR: C: [WSEC_CBB][636] (UTC) 1970-01-01 04:04:07 The file is not KSF format.
1970-01-01 12:04:07.201178 firmware_mgmt ERROR: C: [WSEC_CBB][830] (UTC) 1970-01-01 04:04:07 ReadRootKeyByHandle() failed 255
1970-01-01 12:04:07.201521 firmware_mgmt ERROR: C: [WSEC_CBB][1805] (UTC) 1970-01-01 04:04:07 MemImportKsf ReadKsf failed, result = 255
1970-01-01 12:04:07.202288 firmware_mgmt ERROR: hpm_package.lua(207): decrypt srcfile failed, err:./opt/bmc/libmc/lualib/mc/logging.lua:395: kmc import ksf failed, ret = 255
1970-01-01 12:04:07.203011 firmware_mgmt WARNING: init.lua(97): hpm_package.lua:669 > hpm_package.lua:565 > hpm_package.lua:241: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed
1970-01-01 12:04:07.203575 firmware_mgmt ERROR: control.lua(321): parse package(rootfs_openUBMC-vpd-sensor.hpm) failed, ret:FirmwareUpgradeError: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed.
1970-01-01 12:04:07.405397 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:04:07.407677 firmware_mgmt NOTICE: active_single_host_fructrl.lua(61): active_single_host_fructrl fructrl get power status
1970-01-01 12:04:07.411378 firmware_mgmt NOTICE: state_simple_upgrading.lua(87): simple upgraded, current active mode is:nil, wait restart seconds:30000
1970-01-01 12:04:07.419871 firmware_mgmt NOTICE: init.lua(33): update status to FS_IDLE.
1970-01-01 12:04:30.783055 certificate ERROR: certificate_parser.lua(265): The certificate start time is greater than the current time
1970-01-01 12:04:56.533085 web_backend NOTICE: init.lua(98): upload content length:number 68932329, remaining capacity space:number 130367488
1970-01-01 12:05:03.921490 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:05:03.921965 firmware_mgmt NOTICE: utils.lua(35): The file path is local.
1970-01-01 12:05:03.933156 firmware_mgmt NOTICE: init.lua(33): update status to FS_SIMPLE_UPGRADING.
1970-01-01 12:05:03.955619 firmware_mgmt NOTICE: task_service.lua(49): task create success, task id: 794077183
1970-01-01 12:05:04.015065 firmware_mgmt NOTICE: file_transfer.lua(145): start to move file [rootfs_openUBMC-og.hpm] from tmp to shm
1970-01-01 12:05:04.140659 chassis ERROR: tasks.lua(83): task [health monitor task] error: BMC.Error.Unknow: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/sd_bus/init.lua:226: ./opt/bmc/libmc/lualib/mc/context.lua:185: ./opt/bmc/libmc/lualib/mc/signal.lua:257: ./opt/bmc/apps/hwproxy/lualib/hwproxy_objects/app_bus.lua:104: …bmc/apps/hwproxy/lualib/hwproxy_objects/work_objects.lua:74: chip: Smc_ExpBoardSMC_0101, bus: I2c_8, write failed: smc.lua:89: request error, opcode not supported, SMC completion code: 1 [repeated 132 times in 301s from 1970-01-01 12:00:03.785190 to 1970-01-01 12:05:04.140659]
1970-01-01 12:05:04.543526 firmware_mgmt NOTICE: file_transfer.lua(150): move_file_s ok:true, err:0
1970-01-01 12:05:05.010638 firmware_mgmt NOTICE: validate_sign.lua(174): verify signature successfully
1970-01-01 12:05:05.011365 firmware_mgmt NOTICE: action.lua(37): Validate signature successfully
1970-01-01 12:05:05.019880 firmware_mgmt ERROR: hpm_package.lua(179): read from profile_en failed, generate new key and try again
1970-01-01 12:05:05.022242 firmware_mgmt ERROR: C: [WSEC_CBB][636] (UTC) 1970-01-01 04:05:05 The file is not KSF format.
1970-01-01 12:05:05.022552 firmware_mgmt ERROR: C: [WSEC_CBB][830] (UTC) 1970-01-01 04:05:05 ReadRootKeyByHandle() failed 255
1970-01-01 12:05:05.023081 firmware_mgmt ERROR: C: [WSEC_CBB][1805] (UTC) 1970-01-01 04:05:05 MemImportKsf ReadKsf failed, result = 255
1970-01-01 12:05:05.023532 firmware_mgmt ERROR: hpm_package.lua(207): decrypt srcfile failed, err:./opt/bmc/libmc/lualib/mc/logging.lua:395: kmc import ksf failed, ret = 255
1970-01-01 12:05:05.024280 firmware_mgmt WARNING: init.lua(97): hpm_package.lua:669 > hpm_package.lua:565 > hpm_package.lua:241: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed
1970-01-01 12:05:05.024805 firmware_mgmt ERROR: control.lua(321): parse package(rootfs_openUBMC-og.hpm) failed, ret:FirmwareUpgradeError: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed.
1970-01-01 12:05:05.239855 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:05:05.241192 firmware_mgmt NOTICE: active_single_host_fructrl.lua(61): active_single_host_fructrl fructrl get power status
1970-01-01 12:05:05.244332 firmware_mgmt NOTICE: state_simple_upgrading.lua(87): simple upgraded, current active mode is:nil, wait restart seconds:30000
1970-01-01 12:05:05.252123 firmware_mgmt NOTICE: init.lua(33): update status to FS_IDLE.
1970-01-01 12:05:22.554528 web_backend NOTICE: init.lua(98): upload content length:number 68900246, remaining capacity space:number 130367488
1970-01-01 12:05:29.942136 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:05:29.942828 firmware_mgmt NOTICE: utils.lua(35): The file path is local.
1970-01-01 12:05:29.952255 firmware_mgmt NOTICE: init.lua(33): update status to FS_SIMPLE_UPGRADING.
1970-01-01 12:05:29.977214 firmware_mgmt NOTICE: task_service.lua(49): task create success, task id: 2353463143
1970-01-01 12:05:30.036154 firmware_mgmt NOTICE: file_transfer.lua(145): start to move file [rootfs_openUBMC.hpm] from tmp to shm
1970-01-01 12:05:30.579786 firmware_mgmt NOTICE: file_transfer.lua(150): move_file_s ok:true, err:0
1970-01-01 12:05:31.001927 firmware_mgmt NOTICE: validate_sign.lua(174): verify signature successfully
1970-01-01 12:05:31.002674 firmware_mgmt NOTICE: action.lua(37): Validate signature successfully
1970-01-01 12:05:31.008635 firmware_mgmt ERROR: hpm_package.lua(179): read from profile_en failed, generate new key and try again
1970-01-01 12:05:31.009606 firmware_mgmt ERROR: C: [WSEC_CBB][636] (UTC) 1970-01-01 04:05:31 The file is not KSF format.
1970-01-01 12:05:31.010098 firmware_mgmt ERROR: C: [WSEC_CBB][830] (UTC) 1970-01-01 04:05:31 ReadRootKeyByHandle() failed 255
1970-01-01 12:05:31.010656 firmware_mgmt ERROR: C: [WSEC_CBB][1805] (UTC) 1970-01-01 04:05:31 MemImportKsf ReadKsf failed, result = 255
1970-01-01 12:05:31.011008 firmware_mgmt ERROR: hpm_package.lua(207): decrypt srcfile failed, err:./opt/bmc/libmc/lualib/mc/logging.lua:395: kmc import ksf failed, ret = 255
1970-01-01 12:05:31.011898 firmware_mgmt WARNING: init.lua(97): hpm_package.lua:669 > hpm_package.lua:565 > hpm_package.lua:241: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed
1970-01-01 12:05:31.012541 firmware_mgmt ERROR: control.lua(321): parse package(rootfs_openUBMC.hpm) failed, ret:FirmwareUpgradeError: An error occurred during the firmware upgrade process. Details: Upgrade write config file failed.
1970-01-01 12:05:31.230827 firmware_mgmt NOTICE: active_fructl.lua(95): get host type is Singlehost
1970-01-01 12:05:31.232032 firmware_mgmt NOTICE: active_single_host_fructrl.lua(61): active_single_host_fructrl fructrl get power status
1970-01-01 12:05:31.235269 firmware_mgmt NOTICE: state_simple_upgrading.lua(87): simple upgraded, current active mode is:nil, wait restart seconds:30000
1970-01-01 12:05:31.255201 firmware_mgmt NOTICE: init.lua(33): update status to FS_IDLE.

参考 不保留配置升级后,带外ipmi命令发不通

之前已经多次修改过Administrator的密码了,通过网页也修改过,通过ipmitool带内命令也修改过,没有效果

这里面的ksf 报错, 是指kmc解密hpm包失败。环境上的profile_en文件不是ksf格式