FENCE_AGENT(8)

💖 FENCE_AGENT(8) — the fence_lindypdu girlies' manual 💖

okay so bestie, welcome to the System Manager's Manual, section 8, and today's main character is fence_lindypdu. yes she's a fence agent. yes she eats. let's go 🫶

---

✨ NAME ✨

fence_lindypdu — the Fence agent for Lindy over SNMP. that's it, that's the name, she's iconic 💅

---

🌸 DESCRIPTION 🌸

okay so fence_lindypdu is a Power Fencing agent and she's the one you call when you've got a Lindy PDU network power switch in the house. the vibe? she logs into the device via SNMP and reboots a specified outlet. that's her whole thing and she does it flawlessly, no cap. she supports SNMP v1 with all combinations of authenticity/privacy settings — all of them, every single combo, she's not picky 💖

and here's the tea: the fence agent takes options on the command line and from stdin. fenced sends parameters through stdin when it execs the agent. but you can also run her all by herself with command line options — which is lowkey so useful for testing and for turning outlets on or off from scripts. main character energy fr fr ✨

Vendor URL: http://www.lindy.co.uk 🌈

---

🎀 PARAMETERS 🎀

okay bestie, here's the whole roster. every single one. no skipping, we don't do that here 💅

• -o, --action=[action] — the fencing action, obvi. (Default Value: reboot)
• -c, --community=[community] — set the community string. (Default Value: public)
• -a, --ip=[ip] — IP address or hostname of the fencing device. 🚨 This parameter is always required.
• -u, --ipport=[port] — TCP/UDP port to use for connection with the device. (Default Value: 161)
• -p, --password=[password] — login password or passphrase 🔐
• -S, --password-script=[script] — script to run to retrieve the password 🧚
• -n, --plug=[id] — physical plug number on device, UUID, or identification of the machine. 🚨 This parameter is always required.
• -b, --snmp-auth-prot=[prot] — set authentication protocol (MD5|SHA)
• -P, --snmp-priv-passwd=[pass] — set privacy protocol password 🤫
• -R, --snmp-priv-passwd-script — script to run to retrieve the privacy password
• -B, --snmp-priv-prot=[prot] — set privacy protocol (DES|AES)
• -E, --snmp-sec-level=[level] — set security level (noAuthNoPriv|authNoPriv|authPriv)
• -d, --snmp-version=[version] — specifies the SNMP version to use (1|2c|3). (Default Value: 1)
• -s, --switch=[id] — physical switch number on device. (Default Value: 1)
• -l, --username=[name] — login name 👑
• -q, --quiet — disable logging to stderr. does not affect --verbose or --debug-file or logging to syslog. (she's quiet but not that quiet)
• -v, --verbose — verbose mode. multiple -v flags can be stacked on the command line (e.g., -vvv) to increase verbosity. stack her UP 🔥
• --verbose-level — level of debugging detail in output. defaults to the number of --verbose flags specified on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• -D, --debug-file=[debugfile] — write debug information to the given file 📝
• -V, --version — display version information and exit
• -h, --help — display help and exit
• --plug-separator=[char] — separator for the plug parameter when specifying more than 1 plug. (Default Value: ,)
• -C, --separator=[char] — separator for CSV created by the list operation. (Default Value: ,)
• --delay=[seconds] — wait X seconds before fencing is started. (Default Value: 0)
• --disable-timeout=[true/false] — disable timeout (true/false). (default: true when run from Pacemaker 2.0+)
• --login-timeout=[seconds] — wait X seconds for cmd prompt after login. (Default Value: 5)
• --power-timeout=[seconds] — test X seconds for status change after ON/OFF. (Default Value: 20)
• --power-wait=[seconds] — wait X seconds after issuing ON/OFF. (Default Value: 0)
• --shell-timeout=[seconds] — wait X seconds for cmd prompt after issuing a command. (Default Value: 3)
• --stonith-status-sleep=[seconds] — sleep X seconds between status calls during a STONITH action. (Default Value: 1)
• --retry-on=[attempts] — count of attempts to retry power on. (Default Value: 1)
• --snmpget-path=[path] — path to the snmpget binary. (Default Value: /usr/bin/snmpget)
• --snmpset-path=[path] — path to the snmpset binary. (Default Value: /usr/bin/snmpset)
• --snmpwalk-path=[path] — path to the snmpwalk binary. (Default Value: /usr/bin/snmpwalk)

---

💅 ACTIONS 💅

here's what she can actually do, bestie. pick your fighter:

• on — power on the machine. ⚡
• off — power off the machine. 💀
• reboot — reboot the machine. 🔄
• status — this returns the status of the plug/virtual machine.
• list — list available plugs with aliases/virtual machines if there's support for more than one device. returns N/A otherwise.
• list-status — list available plugs with aliases/virtual machines and their power state, if it can be obtained without additional commands.
• monitor — check the health of the fence device. 🩺
• metadata — display the XML metadata describing this resource.
• manpage — the operational behavior of this is not known. 🙈 (yes really, that's what it says, we're keeping it, don't come for us)
• validate-all — validate if all required parameters are entered. ✅

---

🦋 STDIN PARAMETERS 🦋

same squad, different entrance — when fenced pipes stuff in through stdin, these are the names it uses:

• action — fencing action (Default Value: reboot)
• community — set the community string (Default Value: public)
• ip — IP address or hostname of the fencing device. This parameter is always required. Obsoletes: ipaddr
• ipport — TCP/UDP port to use for connection with the device (Default Value: 161)
• password — login password or passphrase. Obsoletes: passwd
• password_script — script to run to retrieve the password. Obsoletes: passwd_script
• plug — physical plug number on device, UUID, or identification of the machine. This parameter is always required. Obsoletes: port
• snmp_auth_prot — set authentication protocol (MD5|SHA)
• snmp_priv_passwd — set privacy protocol password
• snmp_priv_passwd_script — script to run to retrieve the privacy password
• snmp_priv_prot — set privacy protocol (DES|AES)
• snmp_sec_level — set security level (noAuthNoPriv|authNoPriv|authPriv)
• snmp_version — specifies the SNMP version to use (1|2c|3) (Default Value: 1)
• switch — physical switch number on device (Default Value: 1)
• username — login name. Obsoletes: login
• quiet — disable logging to stderr. Does not affect --verbose or --debug-file or logging to syslog.
• verbose — verbose mode. Multiple -v flags can be stacked on the command line (e.g., -vvv) to increase verbosity.
• verbose_level — level of debugging detail in output. Defaults to the number of --verbose flags specified on the command line, or to 1 if verbose=1 in a stonith device configuration (i.e., on stdin).
• debug_file — write debug information to the given file. Obsoletes: debug
• version — display version information and exit
• help — display help and exit
• plug_separator — separator for the plug parameter when specifying more than 1 plug (Default Value: ,)
• separator — separator for CSV created by the list operation (Default Value: ,)
• delay — wait X seconds before fencing is started (Default Value: 0)
• disable_timeout — disable timeout (true/false) (default: true when run from Pacemaker 2.0+)
• login_timeout — wait X seconds for cmd prompt after login (Default Value: 5)
• power_timeout — test X seconds for status change after ON/OFF (Default Value: 20)
• power_wait — wait X seconds after issuing ON/OFF (Default Value: 0)
• shell_timeout — wait X seconds for cmd prompt after issuing a command (Default Value: 3)
• stonith_status_sleep — sleep X seconds between status calls during a STONITH action (Default Value: 1)
• retry_on — count of attempts to retry power on (Default Value: 1)
• snmpget_path — path to the snmpget binary (Default Value: /usr/bin/snmpget)
• snmpset_path — path to the snmpset binary (Default Value: /usr/bin/snmpset)
• snmpwalk_path — path to the snmpwalk binary (Default Value: /usr/bin/snmpwalk)

---

🫶 quick reminder bestie: --ip/ip and --plug/plug are always required. no plug, no ip, no fencing. she will simply not know what to do with herself. 😭

---

and that's the whole page, babes. this was fence_lindypdu (Fence Agent), dated 2009-10-20, living her truth inside FENCE_AGENT(8) in the System Manager's Manual. go forth and fence responsibly ✨💖🎀