iSCSI login failed due to authorization failure about ceph-iscsi-cli HOT 4 CLOSED

each client defined in gwcli can have 1-WAY auth (CHAP) defined. On the initiator side, the client's iqn (/etc/iscsi/initiatorname.iscsi) must match the definition in gwcli, and the username and password defined in the clients iscsid.conf must match the gwcli chap settings (node.session..)
e.g.
in iscsid.conf
node.session.auth.username = myuser
node.session.auth.password = mypassword1234

and then in gwcli check auth with the info command

o- hosts ..................................................................................... [Hosts: 1]
  o- iqn.1994-05.com.redhat:rh7-client ....................................... [Auth: CHAP, Disks: 0(0b)]
/iscsi-target...ceph-gw/hosts> iqn.1994-05.com.redhat:rh7-client/ info 
Client Iqn .. iqn.1994-05.com.redhat:rh7-client
Logged In  .. 
Auth
- chap .. myuser/mypassword1234
Group Name .. 
Luns       .. UNDEFINED

from ceph-iscsi-cli.

For 1 and 2, I'm not sure what you mean but the initiator name is on the initiator side is in /etc/iscsi/initiatorname.iscsi. During the login process it's sends the target this name so yeah it has to match what you set on the target side.

from ceph-iscsi-cli.

@mikechristie
gwcli can create many clients，each client have single auth. so if the initiator loging to target, which auth would ititiator use?

iscsi-target .......................................... [Targets: 1]
o- iqn.2003-01.com.redhat.iscsi-gw:ceph-igw ........... [Gateways: 2]
o- gateways ................................. [Up: 2/2, Portals: 2]
| o- node0 .................................. [172.16.121.130 (UP)]
| o- node1 .................................. [172.16.121.131 (UP)]
o- host-groups ....................................... [Groups : 0]
o- hosts ............................................... [Hosts: 3]
o- iqn.1994-05.com.redhat:rh7-client . [Auth: None, Disks: 0(0b)]
o- iqn.1994-05.com.redhat:xx ....... [Auth: CHAP, Disks: 1(128M)]
| o- lun 0 ..................... [rbd.disk_1(128M), Owner: node1]
o- iqn.2003-01.com.redhat.iscsi-gw:nike [Auth: CHAP, Disks: 1(12

from ceph-iscsi-cli.

@mikechristie @pcuzner : I define the client name same with target name( iqn.2003-01.com.redhat.iscsi-gw:ceph-igw). initiator login successfully.
Thanks a lot!

/iscsi-target...eph-igw/hosts> iqn.2003-01.com.redhat.iscsi-gw:ceph-igw/ info
Client Iqn .. iqn.2003-01.com.redhat.iscsi-gw:ceph-igw
Logged In .. LOGGED_IN
Auth

• chap .. consumer/012345678912
  Group Name ..
  Luns
• rbd.disk_1 .. lun_id=0
• rbd.disk_3 .. lun_id=1

from ceph-iscsi-cli.