ceph-iscsi icon indicating copy to clipboard operation
ceph-iscsi copied to clipboard

can't handle discovery auth requests when discovery auth is disabled

Open mathrock74 opened this issue 5 years ago • 6 comments

The Ceph iSCSI gateway doesn't allow target discovery when discovery_auth is disabled but the client sends discovery_auth requests

Apr 18 13:05:01 ceiscsi0 kernel: CHAP user or password not set for Initiator ACL Apr 18 13:05:01 ceiscsi0 kernel: Security negotiation failed. Apr 18 13:05:01 ceiscsi0 kernel: iSCSI Login negotiation failed.

This is especially annoying with oVirt, where you can only give one set of credentials for discovery and target auth and discovery auth requests are always sent. When I don't want to have the same credentials for both phases on the gateway and I disable discovery_auth, oVirt can't login. Other iSCSI vendors (FreeNAS) don't have this limitation.

I don't know if this is the right place to report it, but I would very much appreciate if this could be resolved.

thank you

mathrock74 avatar Apr 19 '19 08:04 mathrock74