Have you set the CHAP username and password on both sides (and ensured that the initiator IQN matches)? On the initiator side, you would run the following before attempting to log into the portal:
iscsiadm --mode node --targetname <iqn> --op=update --name node.session.auth.authmethod --value=CHAP iscsiadm --mode node --targetname <iqn> --op=update --name node.session.auth.username --value=<username> iscsiadm --mode node --targetname <iqn> --op=update --name node.session.auth.password --value=<password> On Sat, Oct 14, 2017 at 11:50 AM, Kashif Mumtaz <[email protected]> wrote: > Hello Dear, > > I am trying to configure the Ceph iscsi gateway on Ceph Luminious . As per > below > > Ceph iSCSI Gateway — Ceph Documentation > <http://docs.ceph.com/docs/master/rbd/iscsi-overview/> > > Ceph iSCSI Gateway — Ceph Documentation > <http://docs.ceph.com/docs/master/rbd/iscsi-overview/> > > > > Ceph is iscsi gateway are configured and chap auth is set. > > > > > /> ls > o- / ............................................................ > ............................................................. [...] > o- clusters ............................................................ > ............................................ [Clusters: 1] > | o- ceph ............................................................ > .............................................. [HEALTH_WARN] > | o- pools .............................. > ............................................................................ > [Pools: 2] > | | o- kashif .............................. > ................................... [Commit: 0b, Avail: 116G, Used: 1K, > Commit%: 0%] > | | o- rbd .............................. > ..................................... [Commit: 10G, Avail: 116G, Used: > 3K, Commit%: 8%] > | o- topology .............................. > ................................................................. [OSDs: > 13,MONs: 3] > o- disks ............................................................ > ............................................. [10G, Disks: 1] > | o- rbd.disk_1 .............................. > ..................................................................... > [disk_1 (10G)] > o- iscsi-target .............................. > ....................................................................... > [Targets: 1] > o- iqn.2003-01.com.redhat.iscsi-gw:tahir > ......................................................................... > [Gateways: 2] > o- gateways .............................. > .............................................................. [Up: 2/2, > Portals: 2] > | o- gateway .............................. > .............................................................. > [192.168.10.37 (UP)] > | o- gateway2 .............................. > ............................................................. > [192.168.10.38 (UP)] > o- hosts .............................. > ............................................................................ > [Hosts: 1] > o- iqn.1994-05.com.redhat:rh7-client > ........................................................... [Auth: CHAP, > Disks: 1(10G)] > o- lun 0 .............................. > ................................................ [rbd.disk_1(10G), Owner: > gateway2] > /> > > > > But initiators are unable to mount it. Try both ion Linux and ESXi 6. > > > > Below is the error message on iscsi gateway server log file. > > Oct 14 19:34:49 gateway kernel: iSCSI Initiator Node: > iqn.1998-01.com.vmware:esx0-36c45c69 is not authorized to access iSCSI > target portal group: 1. > Oct 14 19:34:49 gateway kernel: iSCSI Login negotiation failed. > > Oct 14 19:35:27 gateway kernel: iSCSI Initiator Node: > iqn.1994-05.com.redhat:5ef55740c576 is not authorized to access iSCSI > target portal group: 1. > Oct 14 19:35:27 gateway kernel: iSCSI Login negotiation failed. > > > I am giving the ceph authentication on initiator side. > > Discovery on initiator is happening > > root@server1 ~]# iscsiadm -m discovery -t st -p 192.168.10.37 > 192.168.10.37:3260,1 iqn.2003-01.com.redhat.iscsi-gw:tahir > 192.168.10.38:3260,2 iqn.2003-01.com.redhat.iscsi-gw:tahir > > But when trying to login , it is giving "iSCSI login failed due to > authorization failure" > > > [root@server1 ~]# iscsiadm -m node -T iqn.2003-01.com.redhat.iscsi-gw:tahir > -l > Logging in to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, > portal: 192.168.10.37,3260] (multiple) > Logging in to [iface: default, target: iqn.2003-01.com.redhat.iscsi-gw:tahir, > portal: 192.168.10.38,3260] (multiple) > iscsiadm: Could not login to [iface: default, target: > iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.37,3260]. > iscsiadm: initiator reported error (24 - iSCSI login failed due to > authorization failure) > iscsiadm: Could not login to [iface: default, target: > iqn.2003-01.com.redhat.iscsi-gw:tahir, portal: 192.168.10.38,3260]. > iscsiadm: initiator reported error (24 - iSCSI login failed due to > authorization failure) > iscsiadm: Could not log into all portals > > > Can someone give the idea what is missing. > > > > > > > _______________________________________________ > ceph-users mailing list > [email protected] > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com > > -- Jason
_______________________________________________ ceph-users mailing list [email protected] http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
