Dell CSM/CSI Driver for Unity: Authentication response code: 401 with STIG enabled Unity Array

摘要: Dell Container Storage Modules(CSM) Family: Container Storage Interface (CSI) Driver for Unity: Authentication Error "Authentication response code: 401" with Security Technical Implementation Guide (STIG) enabled Unity Array ...

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。
查看其他资源

症状

The CSI Driver works for a period of time, but then fails with the below errors.
Initially the issue was thought to be related to sharing the user between multiple applications. Even a dedicated user for the CSI Driver does not resolve the issue.

The username and password for the CSI Driver are stored in a secret, were verified, and had not changed. Controller logs indicate that a 401 response code and authentication failed:

time="2022-10-12T17:44:29Z" level=debug msg="Executing Authenticate REST client" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:51"
time="2022-10-12T17:44:29Z" level=debug msg="Response code:401 for url: /api/types/loginSessionInfo" func="github.com/dell/gounity/api.(*client).DoAndGetResponseBody()" file="dell/gounity@v1.10.0/api/restclient.go:292"
time="2022-10-12T17:44:29Z" level=debug msg="Authentication response code: 401" func="github.com/dell/gounity.(*Client).Authenticate()" file="dell/gounity@v1.10.0/unityclient.go:65"
time="2022-10-12T17:44:29Z" level=error arrayid=<arrayId> runid=40724 msg="Unity authentication failed for array <arrayID> error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password." func="github.com/dell/csi-unity/service.singleArrayProbe()" file="/go/src/csi-unity/service/service.go:774"
time="2022-10-12T17:44:29Z" level=info msg="/csi.v1.Node/NodeStageVolume: REP 40724: rpc error: code = FailedPrecondition desc =  runid=40724 Unable to login to Unity. Error: rpc error: code = Unauthenticated desc = Authentication failed. Unable to login to Unity. Verify username and password."
time="2022-10-12T17:45:00Z" level=info

 

原因

The Dell CSI Driver for Unity prior to 2.8 is not qualified to work with Security Technical Implementation Guide (STIG) enabled Unity arrays. STIG enabled Unity arrays set a session time limit. There is no way to disable this timeout on the array after enabling STIG.

 

STIG here means Security Technical Implementation Guide. This defines a configuration standard for computer deployments required by the US Department of Defense (DoD) Information Assurance (IA) program. These guidelines are designed to enhance security settings and configuration options before the systems are connected to a network.

 

解决方案

Resolution:
Engineering has resolved this issue in the Dell Technologies Container Storage Interface (CSI) Driver for Unity 2.8.
Details on the enhancement here: https://github.com/dell/csm/issues/891

 

文章属性
文章编号: 000207429
文章类型: Solution
上次修改时间: 12 12月 2023
版本:  5
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。