OpenStack fails to initialize cmode driver
Applies to
- NetApp ONTAP v9.16.1P6
- OpenStack Cinder v18.2.2
- NetApp CmodeNfsDriver (NFS protocol)
- Security Assertion Markup Language (SAML) for ONTAP
Issue
- When attempting to connect OpenStack Cinder to NetApp ONTAP storage, the Cinder volume service fails to initialize the NetApp CmodeNfsDriver if Security Assertion Markup Language (SAML) authentication is enabled on the ONTAP system.
- The following output is seen in the Openstack logs:
2025-10-15 16:54:41.014 11 INFO cinder.volume.manager [req-b0716ab4-4485-43d0-8bc5-cb84b7be2d9c - - - - -] Starting volume driver NetAppCmodeNfsDriver (2.0.0)
2025-10-15 16:54:41.022 11 WARNING cinder.volume.drivers.nfs [req-b0716ab4-4485-43d0-8bc5-cb84b7be2d9c - - - - -] The NAS file permissions mode will be 666 (allowing other/world read & write access). This is considered an insecure NAS environment. Please see https://docs.openstack.org/cinder/latest/admin/blockstorage-nfs-backend.html for information on a secure NFS configuration.
2025-10-15 16:54:41.022 11 WARNING cinder.volume.drivers.nfs [req-b0716ab4-4485-43d0-8bc5-cb84b7be2d9c - - - - -] The NAS file operations will be run as root: allowing root level access at the storage backend. This is considered an insecure NAS environment. Please see https://docs.openstack.org/cinder/latest/admin/blockstorage-nfs-backend.html for information on a secure NAS configuration.
2025-10-15 16:54:41.401 11 ERROR cinder.volume.manager [req-b0716ab4-4485-43d0-8bc5-cb84b7be2d9c - - - - -] Failed to initialize driver.: File "<string>", line 14
2025-10-15 16:54:41.401 11 ERROR cinder.volume.manager Traceback (most recent call last): 2025-10-15 16:54:41.401 11 ERROR cinder.volume.manager File "/usr/lib/python3.9/site-packages/cinder/volume/manager.py", line 513, in _init_host
- The ONTAP Apache logs do not show a user when the Cinder driver tries to start:
[Mon Oct 15 18:52:17.865380 2025 +0000] "POST /servlets/netapp.servlets.admin.XMLrequest_filer HTTP/1.1" 302 1300 4797 - 0
- The ONTAP Audit log shows "unknown" as the user:
Mon Oct 15 2025 19:02:15 +00:00 [kern_audit:info:25477] 8503e800000034cb :: csfiler-lab-rtp:ontapi :: 172.18.144.6:44834 :: svm1:unknown :: POST /servlets/netapp.servlets.admin.XMLrequest_filer HTTP/1.1 :: Success: 302 Found
