Dell CSM/CSI Driver for Unity: Authentication response code: 401 with STIG enabled Unity Array
Resumen: Dell Container Storage Modules(CSM) Family: Container Storage Interface (CSI) Driver for Unity: Authentication Error "Authentication response code: 401" with Security Technical Implementation Guide (STIG) enabled Unity Array ...
Síntomas
The CSI Driver works for a period of time, but then fails with the below errors.
Initially the issue was thought to be related to sharing the user between multiple applications. Even a dedicated user for the CSI Driver does not resolve the issue.
The username and password for the CSI Driver are stored in a secret, were verified, and had not changed. Controller logs indicate that a 401 response code and authentication failed:
time="2022-10-12T17:44:29Z" level=debug msg="Executing Authenticate REST client" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:51" time="2022-10-12T17:44:29Z" level=debug msg="Response code:401 for url: /api/types/loginSessionInfo" func="github.com/dell/gounity/api.(*client).DoAndGetResponseBody()" file="dell/gounity@v1.10.0/api/restclient.go:292" time="2022-10-12T17:44:29Z" level=debug msg="Authentication response code: 401" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:65" time="2022-10-12T17:44:29Z" level=error arrayid=<arrayId> runid=40724 msg="Unity authentication failed for array <arrayID> error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password." func="github.com/dell/csi-unity/service.singleArrayProbe()" file="/go/src/csi-unity/service/service.go:774" time="2022-10-12T17:44:29Z" level=info msg="/csi.v1.Node/NodeStageVolume: REP 40724: rpc error: code = FailedPrecondition desc = runid=40724 Unable to login to Unity. Error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password." time="2022-10-12T17:45:00Z" level=info
Causa
The Dell CSI Driver for Unity prior to 2.8 is not qualified to work with Security Technical Implementation Guide (STIG) enabled Unity arrays. STIG enabled Unity arrays set a session time limit. There is no way to disable this timeout on the array after enabling STIG.
STIG here means Security Technical Implementation Guide. This defines a configuration standard for computer deployments required by the US Department of Defense (DoD) Information Assurance (IA) program. These guidelines are designed to enhance security settings and configuration options before the systems are connected to a network.
Resolución
Resolution:
Engineering has resolved this issue in the Dell Technologies Container Storage Interface (CSI) Driver for Unity 2.8.
Details on the enhancement here: https://github.com/dell/csm/issues/891