Dell CSM/CSI Driver for Unity: Authentication response code: 401 with STIG enabled Unity Array

Podsumowanie: Dell Container Storage Modules(CSM) Family: Container Storage Interface (CSI) Driver for Unity: Authentication Error "Authentication response code: 401" with Security Technical Implementation Guide (STIG) enabled Unity Array ...

Ten artykuł dotyczy Ten artykuł nie dotyczy Ten artykuł nie jest powiązany z żadnym konkretnym produktem. Nie wszystkie wersje produktu zostały zidentyfikowane w tym artykule.

Objawy

The CSI Driver works for a period of time, but then fails with the below errors.
Initially the issue was thought to be related to sharing the user between multiple applications. Even a dedicated user for the CSI Driver does not resolve the issue.

The username and password for the CSI Driver are stored in a secret, were verified, and had not changed. Controller logs indicate that a 401 response code and authentication failed:

time="2022-10-12T17:44:29Z" level=debug msg="Executing Authenticate REST client" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:51"
time="2022-10-12T17:44:29Z" level=debug msg="Response code:401 for url: /api/types/loginSessionInfo" func="github.com/dell/gounity/api.(*client).DoAndGetResponseBody()" file="dell/gounity@v1.10.0/api/restclient.go:292"
time="2022-10-12T17:44:29Z" level=debug msg="Authentication response code: 401" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:65"
time="2022-10-12T17:44:29Z" level=error arrayid=<arrayId> runid=40724 msg="Unity authentication failed for array <arrayID> error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password." func="github.com/dell/csi-unity/service.singleArrayProbe()" file="/go/src/csi-unity/service/service.go:774"
time="2022-10-12T17:44:29Z" level=info msg="/csi.v1.Node/NodeStageVolume: REP 40724: rpc error: code = FailedPrecondition desc =  runid=40724 Unable to login to Unity. Error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password."
time="2022-10-12T17:45:00Z" level=info

 

Przyczyna

The Dell CSI Driver for Unity prior to 2.8 is not qualified to work with Security Technical Implementation Guide (STIG) enabled Unity arrays. STIG enabled Unity arrays set a session time limit. There is no way to disable this timeout on the array after enabling STIG.

 

STIG here means Security Technical Implementation Guide. This defines a configuration standard for computer deployments required by the US Department of Defense (DoD) Information Assurance (IA) program. These guidelines are designed to enhance security settings and configuration options before the systems are connected to a network.

 

Rozwiązanie

Resolution:
Engineering has resolved this issue in the Dell Technologies Container Storage Interface (CSI) Driver for Unity 2.8.
Details on the enhancement here: https://github.com/dell/csm/issues/891

 

Właściwości artykułu
Numer artykułu: 000207429
Typ artykułu: Solution
Ostatnia modyfikacja: 12 gru 2023
Wersja:  5
Znajdź odpowiedzi na swoje pytania u innych użytkowników produktów Dell
Usługi pomocy technicznej
Sprawdź, czy Twoje urządzenie jest objęte usługą pomocy technicznej.