Bug 1309724

Summary: iSCSI target configured from iBFT requies authorization for login although none was set
Product: Red Hat Enterprise Linux 6 Reporter: Radek Vykydal <rvykydal>
Component: iscsi-initiator-utilsAssignee: Chris Leech <cleech>
Status: CLOSED ERRATA QA Contact: Martin Hoyer <mhoyer>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.7CC: agrover, cleech, coughlan, jstodola, mhoyer, mkovarik, psppsn96, tlavigne
Target Milestone: betaKeywords: Regression, TestBlocker
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: iscsi-initiator-utils-6.2.0.873-19.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-05-10 21:24:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 831002, 1286535, 1309312    

Description Radek Vykydal 2016-02-18 14:53:15 UTC 
When configuring iSCSI target in iBFT (no authorization) logging into target in anaconda fails with:

0:25:40,273 INFO    : ISCSID is /usr/sbin/iscsid
10:25:40,288 DEBUG   : Setting up /etc/iscsi/initiatorname.iscsi
10:25:40,289 INFO    : iSCSI initiator name iqn.2010-04.org.ipxe:00000000-0000-0000-0000-000000000000
10:25:40,290 INFO    : iSCSI startup
10:25:40,463 DEBUG   : iscsi: iscsiuio is at /usr/sbin/iscsiuio
10:25:40,464 WARNING : '/usr/sbin/iscsiuio' specified as full path
10:25:40,497 WARNING : '/usr/sbin/iscsid' specified as full path
10:25:41,603 ERROR   : Could not log into ibft iscsi target iqn.2010-04.virt.nap:default: initiator reported error (24 - iSCSI login failed due to authorization failure)

I can see it in installer of download.eng.brq.redhat.com/pub/rhel/nightly/RHEL-6.8-20160218.n.0/compose/Server/x86_64/os/ which has iscsi-initiator-utils-6.2.0.873-18.el6

iscsiadm -m fw:

# BEGIN RECORD 6.2.0-873.18.el6
iface.initiatorname = iqn.2008-09.com.redhat.gasoline:intel22
iface.isid = iqn.2008-
iface.transport_name = tcp
iface.hwaddress = 00:15:17:96:75:0a
iface.bootproto = DHCP
iface.ipaddress = 10.34.102.57
iface.subnet_mask = 255.255.255.0
iface.gateway = 10.34.102.254
iface.primary_dns = 10.34.39.2
iface.secondary_dns = 10.34.39.2
iface.vlan_id = 0
iface.net_ifacename = eth0
node.name = iqn.2009-02.com.example:ibft
node.conn[0].address = 10.34.102.54
node.conn[0].port = 3260
node.session.auth.username = 10000000
node.session.auth.password = 10000000
node.session.auth.username_in = 10000000
node.session.auth.password_in = 10000000
node.boot_lun = 10000000
# END RECORD


The compose http://download.eng.brq.redhat.com/pub/rhel/rel-eng/RHEL-6.8-20160212.2/ with iscsi-initiator-utils-6.2.0.873-18.el6 works.

iscsiadm -m fw:

# BEGIN RECORD 6.2.0-873.16.el6
iface.initiatorname = iqn.2008-09.com.redhat.gasoline:intel22
iface.transport_name = tcp
iface.hwaddress = 00:15:17:96:75:0a
iface.bootproto = DHCP
iface.ipaddress = 10.34.102.57
iface.subnet_mask = 255.255.255.0
iface.gateway = 10.34.102.254
iface.primary_dns = 10.34.39.2
iface.vlan_id = 0
iface.net_ifacename = eth0
node.name = iqn.2009-02.com.example:ibft
node.conn[0].address = 10.34.102.54
node.conn[0].port = 3260
node.boot_lun = 10000000
# END RECORD
Comment 2 Martin Hoyer 2016-02-19 09:33:09 UTC 
Seems to be introduced in iscsi-initiator-utils-6.2.0.873-18.el6 as RHEL-6.8-20160217.n.0 with 6.2.0.873-16 works well
Comment 4 Chris Leech 2016-02-29 16:55:45 UTC 
This is a regression caused by an issue in the patch applied for bz 1300094, a routine to read sysfs attributes within the iscsi tools returns random stack data when the attribute isn't present.  Working up a fix today.
Comment 6 Martin Hoyer 2016-03-02 11:46:01 UTC 
Working well with iscsi-initiator-utils-6.2.0.873-19.el6
Comment 7 Tom Coughlan 2016-03-02 14:41:14 UTC 
Is there a work-around for 6.8 Beta users? )In other words, should this block Beta?)

Do we need a release note?
Comment 10 Chris Leech 2016-03-02 17:02:28 UTC 
(In reply to Tom Coughlan from comment #7)
> Is there a work-around for 6.8 Beta users? )In other words, should this
> block Beta?)
> 
> Do we need a release note?

Unfortunately I can't think of a workaround, any iBFT boot system that is not configured to use a full set of CHAP secrets will probably fail with build -18

If there's the possibility of a beta respin, this might be worth it
Comment 13 errata-xmlrpc 2016-05-10 21:24:58 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-0833.html
Comment 14 Kyle Marek 2017-03-22 03:10:46 UTC 
This also applies to Fedora 25, but does not seem to be present in Fedora 26 or Fedora Rawhide.