rbd-target-api service fails to start about ceph-iscsi HOT 11 CLOSED

Just one quick warning first. minimum_gateways must be 2 or more. It is not the cause of your crash, but later on when you try to add disks and do other management operations you will get a error about that.

For the git code you are using, do you mean you are using the head of the master branch or using the head from the 3.0 tag?

from ceph-iscsi.

I cloned the master branch of ceph-iscsi on May 23rd and complied the source according to the instructions in the ceph documentation

from ceph-iscsi.

What is the output of

radios get -p rbd gateway.conf - | grep encryption_enabled

?

from ceph-iscsi.

And for the host

iqn.1991-05.com.microsoft:storage01.ho.cruisesystem.com

did you get to the step where you enabled CHAP and set a username and password yet or had that step not yet been completed?

from ceph-iscsi.

    "mutual_password_encryption_enabled": false,
    "password_encryption_enabled": false,
                    "mutual_password_encryption_enabled": false,
                    "password_encryption_enabled": true,

Yes, I had CHAP authentication configured and working

from ceph-iscsi.

Here's the API log from me setting up the ISCSI gateway yesterday
API_log_from_setup.txt

from ceph-iscsi.

Have you setup a /etc/ceph/iscsi-gateway.key and iscsi-gateway-pub.key file?

It looks like the password did not get encrypted correctly. Later when we try to access it during daemon initialization we hit your crash.

from ceph-iscsi.

I do have an iscsi-gateway.key and iscsi-gateway-pub.key file in place - I generated a self-signed cert as follows:

openssl req -newkey rsa:2048 -nodes -keyout iscsi-gateway.key -x509 -days 365 -out iscsi-gateway-pub.key

...interesting on the password not getting encrypted correctly.

I'll check through my notes - i think there was an issue due to an unsatisfied dependency related to python crypto i encountered during my install.

from ceph-iscsi.

OK when I tried initially tried to compile ceph-iscsi, it failed due to a missing python cryptography module -

Here's what I initially installed in CentOS (as per ceph documentation):

yum install libnl3 kmod-libs python-kmod python-pyudev python-gobject python-urwid pyparsing python-netaddr python-netifaces python-crypto python-requests python-flask pyOpenSSL

here's what I installed in addition to the packages above that allowed me to compile ceph-iscsi successfully:

yum install python2-cryptography python2-crypto

from ceph-iscsi.

Is it possible to simply disable the CHAP authentication or reset the chap username and password outside of using the gwcli?

from ceph-iscsi.

UPDATE!!!!

I installed all the dependencies on a different node of my cluster; did a fresh pull from git for tcmu-runner, rtslib-fb, configshell-fb, targetcli-fb and ceph-iscsi; built everything and then configured the iscsi-target from that node and everything now works and survives rebooting!!!!

Thanks for your help @mikechristie !!! Your narrowing down the issue to the password encryption helped tremendously!!!

from ceph-iscsi.