LIA Authentication Shows Invalid When The Lia_trusted_ips Option Is In Use

Scenario

While the lia_trusted_ips option is being used, and when LIA authentication requests come from non-listed IP addresses.

Symptoms

Lia conf.txt showing the configured lia_trusted_ips:

lia_trusted_ips=123.234.243.124,123.234.243.125

Lia trc showing the errors as (Not in whitelist):

05/03 10:09:55.286067 7f318c198db0:netPath_StartAsServer_CK:00480:  :: Disconnected Live SERVER path 0x7f318c1cd210 of portal (nil) net 0xa3a3c0 socket 10 inflights 0 HS:0 Rejected connection from 123.234.243.126 (Not in whitelist).

Impact

Unable to collect logs using the Gateway.

Unable to complete an upgrade using the Gateway.

Root Cause

lia_trusted_ips option is specified in /opt/emc/scaleio/lia/cfg/conf.txt, but LIA authentication requests come from non-listed IP addresses.

Workaround

Reconfigure the LIA conf.txt file, add necessary IP addresses to the list of lia_trusted_ips

(Another workaround is removing the lia_trusted_ips option from the Lia conf.txt, only if it's not necessary.)

Impacted Versions

All

Fixed In Version

N/A - As designed