Dell Remote Access : Debug authorization failed.

Dell.Server.OOB.SNMPTrap.8594 (Rule)

Knowledge Base article:

Summary

A RACADM Debug command failed

Causes

A RACADM Debug command failed. If the RACADM Debug command was executed under the direction of Dell tech support then further assistance from tech support should be requested. Otherwise this command is not intended for customer use.

Cause

Resolutions

Debug authorization failed

Verify all of the following 1) ensure that the unblock, grant, and invoke/start/stop/resume commands are all executed against the same Dell iDRAC. 2) ensure dat.ini file has not been changed in any way. 3) ensure that current date falls between the start and end times. Note that Dell can further restrict both the set of debugCaps that is authorized and the start and stop times. If an authorized person did not enter a RACADM debug command then an attacker may have entered the command.

Resolutions

Additional information on this issue may be available. Launch the iDRAC Console to debug further.

Element properties:

Target

Dell.Server

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Remotable

True

Alert Message

Dell Remote Access : Debug authorization failed.

{0}

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	System.NetworkManagement.SnmpTrapEventProvider	Default
Alert	WriteAction	System.Health.GenerateAlert	Default
ResolveAlert	WriteAction	Dell.Operations.Server.ResolveAlert.WAT	Default

Source Code:

<Rule ID="Dell.Server.OOB.SNMPTrap.8594" Enabled="true" Target="DellModelServer!Dell.Server" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="NetworkDevice!System.NetworkManagement.SnmpTrapEventProvider">

      <IP>$Target/Property[Type="DellModelServer!Dell.Server"]/RemoteAccessIP$</IP>

      <OIDProps>

        <OIDProp>.1.3.6.1.4.1.674.10892.5.3.2.4.0.8594</OIDProp>

      </OIDProps>

      <EventOriginId>$Target/Id$</EventOriginId>

      <PublisherId>$Target/Id$</PublisherId>

      <PublisherName>iDRAC</PublisherName>

      <Channel>SnmpEvent</Channel>

      <LoggingComputer/>

      <EventNumber>8594</EventNumber>

      <EventCategory>5</EventCategory>

      <EventLevel>10</EventLevel>

      <UserName/>

      <Params/>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Dell.Server.OOB.SNMPTrap.8594.Rule"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/Channel$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

        <SuppressionValue>$Data/EventCategory$</SuppressionValue>

        <SuppressionValue>$Data/EventLevel$</SuppressionValue>

        <SuppressionValue>$Data/UserName$</SuppressionValue>

        <SuppressionValue>$Data/EventNumber$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[6]/Value$</SuppressionValue>

        <SuppressionValue>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[8]/Value$</SuppressionValue>

      </Suppression>

      <Custom1>Alert Message ID = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$ </Custom1>

      <Custom2>Alert Message = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[4]/Value$ </Custom2>

      <Custom3>Alert Status = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[5]/Value$ </Custom3>

      <Custom4>Alert Service Tag = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[6]/Value$ </Custom4>

      <Custom5>Alert FQDN = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[7]/Value$ </Custom5>

      <Custom6>Alert FQDD = $Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[8]/Value$ </Custom6>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

    <WriteAction ID="ResolveAlert" TypeID="DellOperationsCommon!Dell.Operations.Server.ResolveAlert.WAT">

      <IP>$Target/Property[Type="DellModelServer!Dell.Server"]/RemoteAccessIP$</IP>

      <MessageID>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[3]/Value$</MessageID>

      <FQDN>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[7]/Value$</FQDN>

      <FQDD>$Data/EventData/DataItem/SnmpVarBinds/SnmpVarBind[8]/Value$</FQDD>

      <EventNumber>$Data/EventNumber$</EventNumber>

      <Prefix>OOB</Prefix>

    </WriteAction>

  </WriteActions>

</Rule>