Get auth token

Change History

openUBMC Version	Revision Date	Description
25.06	2025/06/26	Initial draft: add command details

Obtain the authentication token.

UserMgmt

Byte	Data Field
NetFn	30h
CMD	94h
1:3	Manufacturer ID, LS Byte first. The length is fixed to three bytes. For example, if the vendor ID is 2011 and the corresponding hexadecimal value is 0x0007DB, the first byte is DBh, the second byte is 07h, and the third byte is 00h.
4	Sub command, subcommand=39h
5	Role group ID of the BMC corresponding to the SSO. data1-1:Role ID 2: common user. 3- operator 4- operator (The highest level of the in-band authentication token is operator.)
6	Session types 0-Web (including the web page or the KVM opened through the web page) 1-redfish
7	[bit7:2]: reserved [bit1:0]-user type: 0- local user only 1- domain user
8	IP Data1-1: IP protocol 0-IPv4 1–IPv6
9:24	IPv4 (byte 9 to byte 12) or IPv6 address of the session end user, MSByte first, which is used to check whether the user who obtains the token is the same as the user who uses the token to establish a session, preventing token theft.
The following is the user name (local user name or LDAP account) of the session source end (for example, SMM). The LDAP account may need to be framed. For internal Redfish sessions, bytes 25 to 27 are all set to 0.
25	[7:1]: reserved [0]: cascading flag 0: last data 1: middle data
26	Offset, indicating the offset of the written data. The value starts from 0. Write data in sequence when they are written as multiple frames.
27	Length: length of the data to be written.
28:N	Written data

Byte	Data Field
1	Completion Code
2:4	Manufacturer ID, LS Byte first. The length is fixed to three bytes. For example, if the vendor ID is 2011 and the corresponding hexadecimal value is 0x0007DB, the first byte is DBh, the second byte is 07h, and the third byte is 00h.
5:N	token

Request:

bash

ipmicmd -k "0f 00 MM NN" smi 0

Response:

text

0f MM NN