2

I have a host that is acting as both an iscsi initiator and target. It's an OpenStack box that acts as both the storage node (cinder) and also as a compute node. There is also another compute nodes on the network that just acts as initiator to this target.

The target is a Centos 7 box with an ip address of 192.168.1.10.

Once I create a virtual machine, I can see the volume and 'targetcli ls' shows the LUN and the ACL.

I've copied a number of log outputs to pastebin. These include

  • targetcli ls
  • systemctl status iscsi
  • systemctl status iscsid

I captured logs at the following points:

After a reboot, 'targetcli ls' only shows the LUN but not the ACL. I also have errors in the iscsi and iscsid status information.

iscsid errors

Jan 04 16:03:58 myserver.mydomain iscsid[1398]: connect to 192.168.1.10:3260 failed (Connection refused)
Jan 04 16:04:25 myserver.mydomain iscsid[1398]: conn 0 login rejected: initiator failed authorization with target
Jan 04 16:04:25 myserver.mydomain iscsid[1398]: Connection1:0 to [target: iqn.2010-10.org.openstack:volume-e764f202-b414-424f-b02a-595f797b6b9c, portal: 192.168.1.10,3260] through [iface: default] is shutdown.

iscsi errors

Jan 04 16:03:36 myserver.mydomain iscsi-mark-root-nodes[1042]: iscsiadm: No active sessions. Jan 04 16:04:25 myserver.mydomain iscsiadm[1172]: iscsiadm: Could not login to [iface: default, target: iqn.2010-10.org.openstack:volume-e764f202-b414-424f-b02a-595f797b6b9c, portal: 192.168.1.10,3260].
Jan 04 16:04:25 myserver.mydomain iscsiadm[1172]: iscsiadm: initiator reported error (24 - iSCSI login failed due to authorization failure)
Jan 04 16:04:25 myserver.mydomain iscsiadm[1172]: iscsiadm: Could not log into all portals
Jan 04 16:04:25 myserver.mydomain iscsiadm[1172]: Logging in to [iface: default, target: iqn.2010-10.org.openstack:volume-e764f202-b414-424f-b02a-595f797b6b9c, portal: 192.168.1.10,3260] (multiple)

If I then create a new virt (which creates a new volume), iscsi works for that volume. There is still no ACL associated with the one created pre-reboot.

Rebooting causes the new one to fail too.

My initiatorname in /etc/iscsi/initiatorname.iscsi is 'iqn.1994-05.com.redhat:4fc3b5297ef1', so I tried doing the following, and rebooting, with no improvement

cd /iscsi/iqn.2010-10.org.openstack:volume-e764f202-b414-424f-b02a-595f797b6b9c/tpg1/acls
create iqn.1994-05.com.redhat:4fc3b5297ef1

This produced the following output:

Created Node ACL for iqn.1994-05.com.redhat:4fc3b5297ef1
Created mapped LUN 0.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.