Bug 1309724 - iSCSI target configured from iBFT requies authorization for login although none was set
Summary: iSCSI target configured from iBFT requies authorization for login although no...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: iscsi-initiator-utils
Version: 6.7
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: beta
: ---
Assignee: Chris Leech
QA Contact: Martin Hoyer
URL:
Whiteboard:
Depends On:
Blocks: 831002 1286535 1309312
TreeView+ depends on / blocked
 
Reported: 2016-02-18 14:53 UTC by Radek Vykydal
Modified: 2017-03-22 03:10 UTC (History)
8 users (show)

Fixed In Version: iscsi-initiator-utils-6.2.0.873-19.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-05-10 21:24:58 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:0833 0 normal SHIPPED_LIVE iscsi-initiator-utils bug fix and enhancement update 2016-05-10 22:41:33 UTC

Description Radek Vykydal 2016-02-18 14:53:15 UTC
When configuring iSCSI target in iBFT (no authorization) logging into target in anaconda fails with:

0:25:40,273 INFO    : ISCSID is /usr/sbin/iscsid
10:25:40,288 DEBUG   : Setting up /etc/iscsi/initiatorname.iscsi
10:25:40,289 INFO    : iSCSI initiator name iqn.2010-04.org.ipxe:00000000-0000-0000-0000-000000000000
10:25:40,290 INFO    : iSCSI startup
10:25:40,463 DEBUG   : iscsi: iscsiuio is at /usr/sbin/iscsiuio
10:25:40,464 WARNING : '/usr/sbin/iscsiuio' specified as full path
10:25:40,497 WARNING : '/usr/sbin/iscsid' specified as full path
10:25:41,603 ERROR   : Could not log into ibft iscsi target iqn.2010-04.virt.nap:default: initiator reported error (24 - iSCSI login failed due to authorization failure)

I can see it in installer of download.eng.brq.redhat.com/pub/rhel/nightly/RHEL-6.8-20160218.n.0/compose/Server/x86_64/os/ which has iscsi-initiator-utils-6.2.0.873-18.el6

iscsiadm -m fw:

# BEGIN RECORD 6.2.0-873.18.el6
iface.initiatorname = iqn.2008-09.com.redhat.gasoline:intel22
iface.isid = iqn.2008-
iface.transport_name = tcp
iface.hwaddress = 00:15:17:96:75:0a
iface.bootproto = DHCP
iface.ipaddress = 10.34.102.57
iface.subnet_mask = 255.255.255.0
iface.gateway = 10.34.102.254
iface.primary_dns = 10.34.39.2
iface.secondary_dns = 10.34.39.2
iface.vlan_id = 0
iface.net_ifacename = eth0
node.name = iqn.2009-02.com.example:ibft
node.conn[0].address = 10.34.102.54
node.conn[0].port = 3260
node.session.auth.username = 10000000
node.session.auth.password = 10000000
node.session.auth.username_in = 10000000
node.session.auth.password_in = 10000000
node.boot_lun = 10000000
# END RECORD


The compose http://download.eng.brq.redhat.com/pub/rhel/rel-eng/RHEL-6.8-20160212.2/ with iscsi-initiator-utils-6.2.0.873-18.el6 works.

iscsiadm -m fw:

# BEGIN RECORD 6.2.0-873.16.el6
iface.initiatorname = iqn.2008-09.com.redhat.gasoline:intel22
iface.transport_name = tcp
iface.hwaddress = 00:15:17:96:75:0a
iface.bootproto = DHCP
iface.ipaddress = 10.34.102.57
iface.subnet_mask = 255.255.255.0
iface.gateway = 10.34.102.254
iface.primary_dns = 10.34.39.2
iface.vlan_id = 0
iface.net_ifacename = eth0
node.name = iqn.2009-02.com.example:ibft
node.conn[0].address = 10.34.102.54
node.conn[0].port = 3260
node.boot_lun = 10000000
# END RECORD

Comment 2 Martin Hoyer 2016-02-19 09:33:09 UTC
Seems to be introduced in iscsi-initiator-utils-6.2.0.873-18.el6 as RHEL-6.8-20160217.n.0 with 6.2.0.873-16 works well

Comment 4 Chris Leech 2016-02-29 16:55:45 UTC
This is a regression caused by an issue in the patch applied for bz 1300094, a routine to read sysfs attributes within the iscsi tools returns random stack data when the attribute isn't present.  Working up a fix today.

Comment 6 Martin Hoyer 2016-03-02 11:46:01 UTC
Working well with iscsi-initiator-utils-6.2.0.873-19.el6

Comment 7 Tom Coughlan 2016-03-02 14:41:14 UTC
Is there a work-around for 6.8 Beta users? )In other words, should this block Beta?)

Do we need a release note?

Comment 10 Chris Leech 2016-03-02 17:02:28 UTC
(In reply to Tom Coughlan from comment #7)
> Is there a work-around for 6.8 Beta users? )In other words, should this
> block Beta?)
> 
> Do we need a release note?

Unfortunately I can't think of a workaround, any iBFT boot system that is not configured to use a full set of CHAP secrets will probably fail with build -18

If there's the possibility of a beta respin, this might be worth it

Comment 13 errata-xmlrpc 2016-05-10 21:24:58 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-0833.html

Comment 14 Kyle Marek 2017-03-22 03:10:46 UTC
This also applies to Fedora 25, but does not seem to be present in Fedora 26 or Fedora Rawhide.


Note You need to log in before you can comment on or make changes to this bug.