Dell CSM/CSI Driver for Unity: Authentication response code: 401 with STIG enabled Unity Array

概要: Dell Container Storage Modules(CSM) Family: Container Storage Interface (CSI) Driver for Unity: Authentication Error "Authentication response code: 401" with Security Technical Implementation Guide (STIG) enabled Unity Array ...

この記事は次に適用されます： この記事は次には適用されません： この記事は、特定の製品に関連付けられていません。 すべての製品パージョンがこの記事に記載されているわけではありません。
他のリソースを確認する

現象

The CSI Driver works for a period of time, but then fails with the below errors.
Initially the issue was thought to be related to sharing the user between multiple applications. Even a dedicated user for the CSI Driver does not resolve the issue.

The username and password for the CSI Driver are stored in a secret, were verified, and had not changed. Controller logs indicate that a 401 response code and authentication failed:

time="2022-10-12T17:44:29Z" level=debug msg="Executing Authenticate REST client" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:51"
time="2022-10-12T17:44:29Z" level=debug msg="Response code:401 for url: /api/types/loginSessionInfo" func="github.com/dell/gounity/api.(*client).DoAndGetResponseBody()" file="dell/gounity@v1.10.0/api/restclient.go:292"
time="2022-10-12T17:44:29Z" level=debug msg="Authentication response code: 401" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:65"
time="2022-10-12T17:44:29Z" level=error arrayid=<arrayId> runid=40724 msg="Unity authentication failed for array <arrayID> error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password." func="github.com/dell/csi-unity/service.singleArrayProbe()" file="/go/src/csi-unity/service/service.go:774"
time="2022-10-12T17:44:29Z" level=info msg="/csi.v1.Node/NodeStageVolume: REP 40724: rpc error: code = FailedPrecondition desc =  runid=40724 Unable to login to Unity. Error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password."
time="2022-10-12T17:45:00Z" level=info

 

原因

The Dell CSI Driver for Unity prior to 2.8 is not qualified to work with Security Technical Implementation Guide (STIG) enabled Unity arrays. STIG enabled Unity arrays set a session time limit. There is no way to disable this timeout on the array after enabling STIG.

 

STIG here means Security Technical Implementation Guide. This defines a configuration standard for computer deployments required by the US Department of Defense (DoD) Information Assurance (IA) program. These guidelines are designed to enhance security settings and configuration options before the systems are connected to a network.

 

解決方法

Resolution:
Engineering has resolved this issue in the Dell Technologies Container Storage Interface (CSI) Driver for Unity 2.8.
Details on the enhancement here: https://github.com/dell/csm/issues/891

 

文書のプロパティ
文書番号: 000207429
文書の種類: Solution
最終更新: 12 12月 2023
バージョン:  5
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。