Subject: Re: iSCSI initiator CHAP failure
To: Alistair Crooks <agc@pkgsrc.org>
From: Jay Nelson <jdn@bga.com>
List: current-users
Date: 11/27/2007 09:14:49
On Tue, Nov 27, 2007 at 10:43:31AM +0000, Alistair Crooks wrote:
> On Mon, Nov 26, 2007 at 05:29:55PM -0600, Jay Nelson wrote:
> > I'm trying to configure a sparc64 4.99.37 initiator to mount an
> > i386 4.0_RC3 target without much luck. I can't get past authentication
> > and I'm hoping someone can point me to what I'm doing wrong.
> >
> > Log messages start with:
> >
> > No matching user configuration entry for `jdn' was found
> > Please add an entry for `jdn' to `/etc/iscsi/auths'
> > pid 3175:/usr/src/dist/iscsi/src/parameters.c:545: ***ERROR*** Unknown
> > user `0x88ac594f7d6e0b2bce40fa0ecc29d60c'
> > pid 3175:/usr/src/dist/iscsi/src/parameters.c:187: ***ERROR*** key
> > "AuthResult" not found in param list
> > pid 3175:/usr/src/dist/iscsi/src/initiator.c:1904: ***ERROR***
> > param_text_parse_offer() failed
> >
> >
> > yet /etc/iscsi/auths contains
> >
> > jdn:none:
>
> Change that line to be:
>
> jdn:chap:none
>
> and restart the target.
>
> > and auths' permissions is 600 on both machines.
> >
> > Initiator command is:
> >
> > 'iscsifs -u jdn -h acp /mnt'
> >
> > What did I overlook?
>
> Nothing except very weird syntax on the part of the iSCSI target.
> One of the things on my TODO list is to clean this area up
> entirely.
There is still no joy in Mudville. The initiator says:
sks# iscsifs -u jdn -h acp /iscsi
pid 13232:/usr/src/dist/iscsi/src/initiator.c:1912: ***ERROR*** Bad Status-Class: got 2, expected 0
Nov 27 08:45:53 sks iscsifs: pid 13232:/usr/src/dist/iscsi/src/initiator.c:1912: ***ERROR*** Bad Status-Class: got 2, expected 0
pid 13232:/usr/src/dist/iscsi/src/initiator.c:1737: ***ERROR*** initiator_cmd_t failed
pid 13232:/usr/src/dist/iscsi/src/initiator.c:566: ***ERROR*** login_phase_i() failed
Nov 27 08:45:53 sks iscsifs: pid 13232:/usr/src/dist/iscsi/src/initiator.c:1737: ***ERROR*** initiator_cmd_t failed
Nov 27 08:45:53 sks iscsifs: pid 13232:/usr/src/dist/iscsi/src/initiator.c:566: ***ERROR*** login_phase_i() failed
pid 13232:/usr/src/dist/iscsi/src/initiator.c:1084: ***ERROR*** enqueue_worker: discovery_phase() failed (ignoring command)
Nov 27 08:45:53 sks iscsifs: pid 13232:/usr/src/dist/iscsi/src/initiator.c:1084: ***ERROR*** enqueue_worker: discovery_phase() failed (ignoring command)
And on the target:
Nov 27 08:49:49 acp iscsi-target: pid 751:/usr/src/dist/iscsi/src/parameters.c:648: ***ERROR*** Initiator authentication failed 79 1d
Nov 27 08:49:49 acp iscsi-target: pid 751:/usr/src/dist/iscsi/src/target.c:1087: ***ERROR*** login_command_t() failed
Nov 27 08:49:49 acp iscsi-target: pid 751:/usr/src/dist/iscsi/src/target.c:1207: ***ERROR*** execute_t() failed
The only change to the distributed examples are:
in /etc/iscsi/targets -- a name change to extent0,
extent0 /home/iscsi-sks0 0 100MB
and the addition of "chap" to the passwd,
jdn:chap:none
I tried an ending colon and no colon on the passwd and 777 on the
extent to no avail. Permissions on /etc/iscsi are 755 on both
systems. Also, kernel config contains:
sks# config -x /netbsd | egrep -i 'pu[tf]'
file-system PUFFS # Pass to userspace filesystem
pseudo-device putter
Can't think of anything else.
Thanks.
-- jay
> Regards,
> Alistair