Re: Ceph iSCSI login failed due to authorization failure

Jason Dillaman <jdillama@xxxxxxxxxx> · Sat, 14 Oct 2017 14:50:22 -0400

Have you set the CHAP username and password on both sides (and ensured that the initiator IQN matches)? On the initiator side, you would run the following before attempting to log into the portal:
iscsiadm   --mode node  --targetname <iqn> --op=update --name node.session.auth.authmethod --value=CHAP
iscsiadm   --mode node  --targetname <iqn> --op=update --name node.session.auth.username --value=<username>
iscsiadm   --mode node  --targetname <iqn> --op=update --name node.session.auth.password --value=<password>

On Sat, Oct 14, 2017 at 11:50 AM, Kashif Mumtaz <kashif.mumtaz@xxxxxxxxx> wrote:
Hello Dear,

I am trying to configure the Ceph iscsi gateway on Ceph Luminious . As per below

Ceph iSCSI Gateway — Ceph Documentation

           Ceph iSCSI Gateway — Ceph Documentation

Ceph is iscsi gateway are configured and chap auth is set.

/> ls
o- / ......................................................................................................................... [...]
  o- clusters ........................................................................................................ [Clusters: 1]
  | o- ceph .......................................................................................................... [HEALTH_WARN]
  |   o- pools .......................................................................................................... [Pools: 2]
  |   | o- kashif ................................................................. [Commit: 0b, Avail: 116G, Used: 1K, Commit%: 0%]
  |   | o- rbd ................................................................... [Commit: 10G, Avail: 116G, Used: 3K, Commit%: 8%]
  |   o- topology ............................................................................................... [OSDs: 13,MONs: 3]
  o- disks ......................................................................................................... [10G, Disks: 1]
  | o- rbd.disk_1 ................................................................................................... [disk_1 (10G)]
  o- iscsi-target ..................................................................................................... [Targets: 1]
    o- iqn.2003-01.com.redhat.iscsi-gw:tahir ......................................................................... [Gateways: 2]
      o- gateways ............................................................................................ [Up: 2/2, Portals: 2]
      | o- gateway ............................................................................................ [192.168.10.37 (UP)]
      | o- gateway2 ........................................................................................... [192.168.10.38 (UP)]
      o- hosts .......................................................................................................... [Hosts: 1]
        o- iqn.1994-05.com.redhat:rh7-client ........................................................... [Auth: CHAP, Disks: 1(10G)]
          o- lun 0 .............................................................................. [rbd.disk_1(10G), Owner: gateway2]
/>

But initiators are unable to mount it. Try both ion Linux and ESXi 6.

Below is the  error message on iscsi gateway server log file.

Oct 14 19:34:49 gateway kernel: iSCSI Initiator Node: iqn.1998-01.com.vmware:esx0-36c45c69 is not authorized to access iSCSI target portal group: 1.
Oct 14 19:34:49 gateway kernel: iSCSI Login negotiation failed.

Oct 14 19:35:27 gateway kernel: iSCSI Initiator Node: iqn.1994-05.com.redhat:5ef55740c576 is not authorized to access iSCSI target portal group: 1.
Oct 14 19:35:27 gateway kernel: iSCSI Login negotiation failed.

I am giving the ceph authentication on initiator side.   

Discovery on initiator is happening 

root@server1 ~]# iscsiadm -m discovery -t st -p  192.168.10.37
192.168.10.37:3260,1 iqn.2003-01.com.redhat.iscsi-gw:tahir
192.168.10.38:3260,2 iqn.2003-01.com.redhat.iscsi-gw:tahir

But when trying to login , it is giving  "iSCSI login failed due to authorization failure"

[root@server1 ~]# iscsiadm -m node -T iqn.2003-01.com.redhat.iscsi-gw:tahir  -l
Logging in to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.37,3260] (multiple)
Logging in to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.38,3260] (multiple)
iscsiadm: Could not login to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.37,3260].
iscsiadm: initiator reported error (24 - iSCSI login failed due to authorization failure)
iscsiadm: Could not login to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.38,3260].
iscsiadm: initiator reported error (24 - iSCSI login failed due to authorization failure)
iscsiadm: Could not log into all portals

Can someone give the idea what is missing.

_______________________________________________

ceph-users mailing list

ceph-users@xxxxxxxxxxxxxx

http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

-- 
Jason

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com