Managing initiator identities
Methods, apparatus, and processor-readable storage media for managing initiator identities are provided herein. An example computer-implemented method includes monitoring one or more port identifiers used by respective ones of a plurality of host initiators for accessing one or more storage components of a storage system; detecting, based on the monitoring, anomalous behavior of at least a first one of the host initiators, wherein the detecting comprises identifying that the first host initiator is using at least one same port identifier as a second one of the host initiators to access a particular one of the storage components; and performing at least one automated action in response to the detecting.
1 . A computer-implemented method comprising:
accessing a plurality of host initiators to obtain a list of ports associated with the host initiators;
monitoring, based at least in part on the obtained list of ports, one or more port identifiers of respective ones of the plurality of host initiators for accessing one or more storage components of a storage system;
detecting, based on the monitoring, anomalous behavior of at least a first one of the host initiators, wherein the detecting comprises identifying that the first host initiator comprises at least one same port identifier as a second one of the host initiators to access a particular one of the storage components; and
performing, in response to the detecting, at least one automated action to prevent the first host initiator from accessing the particular one of the storage components, wherein the at least one automated action comprises: generating at least one new port identifier, and providing instructions to adjust respective configurations of the second host initiator, the particular storage component, and a switch between the second host initiator and the storage system based at least in part on the at least one new port identifier, wherein the instructions cause: (i) the second host initiator to replace the at least one same port identifier with the at least one new port identifier; (ii) the particular storage component to replace at least one masking record, associated with the second host initiator and the at least one same port identifier, with at least one new masking based at least in part on the at least one new port identifier; and (iii) the switch to update one or more zoning records associated with the second host initiator based at least in part on the at least one new port identifier, thereby invalidating the at least one same port identifier on the second host initiator, the particular storage component, and the switch, and reestablishing access for the second host initiator using the at least one new port identifier;
wherein the method is performed by at least one processing device comprising a hardware processor.
2 . The computer-implemented method of claim 1 , wherein the instructions to the second host initiator, the particular storage component, and the switch are provided in parallel.
3 . The computer-implemented method of claim 1 , further comprising:
maintaining validation information that identifies validated ports of at least one of: (i) one or more of the host initiators and (ii) one or more of the storage components, wherein the detecting that the first host initiator comprises the at least one same port identifier as the second host initiator is based at least in part on the monitoring and the validation information.
4 . The computer-implemented method of claim 3 , wherein the validation information further identifies port identifiers of the validated ports.
5 . The computer-implemented method of claim 3 , wherein the validation information comprises one or more switches associated with the storage system.
6 . The computer-implemented method of claim 1 , wherein the at least one automated action further comprises:
generating an alert comprising information of the anomalous behavior, wherein the information of the anomalous behavior indicates a location of the first host initiator.
7 . The computer-implemented method of claim 1 , wherein the accessing comprises at least one of:
logging into at least a portion of the storage system to obtain a list of ports associated with at least one of the storage components; and
logging into at least one switch to obtain a list of ports corresponding to the at least one switch.
8 . The computer-implemented method of claim 7 , further comprising:
generating an alert indicating that at least one of the host initiators is misconfigured in response to a failed login attempt.
9 . The computer-implemented method of claim 1 , further comprising:
in response to a failed attempt to access at least one host initiator in the plurality of host initiators, initiating a change to the port identifier of at least one other host initiator in the plurality of host initiators.
10 . The computer-implemented method of claim 1 , wherein accessing the plurality of host initiators to obtain the list of ports associated with the host initiators comprises:
logging into the plurality of host initiators.
11 . A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:
to access a plurality of host initiators to obtain a list of ports associated with the host initiators;
to monitor, based at least in part on the obtained list of ports, one or more port identifiers of respective ones of a plurality of host initiators for accessing one or more storage components of a storage system;
to detect, based on the monitoring, anomalous behavior of at least a first one of the host initiators, wherein the detecting comprises identifying that the first host initiator comprises at least one same port identifier as a second one of the host initiators to access a particular one of the storage components; and
to perform, in response to the detecting, at least one automated action to prevent the first host initiator from accessing the particular one of the storage components, wherein the at least one automated action comprises: generating at least one new port identifier, and providing instructions to adjust respective configurations of the second host initiator, the particular storage component, and a switch between the second host initiator and the storage system based at least in part on the at least one new port identifier, wherein the instructions cause: (i) the second host initiator to replace the at least one same port identifier with the at least one new port identifier; (ii) the particular storage component to replace at least one masking record, associated with the second host initiator and the at least one same port identifier, with at least one new masking based at least in part on the at least one new port identifier; and (iii) the switch to update one or more zoning records associated with the second host initiator based at least in part on the at least one new port identifier, thereby invalidating the at least one same port identifier on the second host initiator, the particular storage component, and the switch, and reestablishing access for the second host initiator using the at least one new port identifier.
12 . The non-transitory processor-readable storage medium of claim 11 , wherein the program code further causes the at least one processing device:
to maintain validation information that identifies validated ports of at least one of: (i) one or more of the host initiators, (ii) one or more of the storage components, and (iii) port identifiers of the validated ports, wherein the detecting that the first host initiator comprises the at least one same port identifier as the second host initiator is based at least in part on the monitoring and the validation information.
13 . The non-transitory processor-readable storage medium of claim 12 , wherein the validation information further identifies port identifiers of the validated ports.
14 . The non-transitory processor-readable storage medium of claim 11 , wherein the instructions to the second host initiator, the particular storage component, and the switch are provided in parallel.
15 . The non-transitory processor-readable storage medium of claim 11 , wherein the at least one automated action further comprises:
generating an alert comprising information of the anomalous behavior, wherein the information of the anomalous behavior indicates a location of the first host initiator.
16 . An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured:
to access a plurality of host initiators to obtain a list of ports associated with the host initiators;
to monitor, based at least in part on the obtained list of ports, one or more port identifiers of respective ones of a plurality of host initiators for accessing one or more storage components of a storage system;
to detect, based on the monitoring, anomalous behavior of at least a first one of the host initiators, wherein the detecting comprises identifying that the first host initiator comprises at least one same port identifier as a second one of the host initiators to access a particular one of the storage components; and
to perform, in response to the detecting, at least one automated action to prevent the first host initiator from accessing the particular one of the storage components, wherein the at least one automated action comprises: generating at least one new port identifier, and providing instructions to adjust respective configurations of the second host initiator, the particular storage component, and a switch between the second host initiator and the storage system based at least in part on the at least one new port identifier, wherein the instructions cause: (i) the second host initiator to replace the at least one same port identifier with the at least one new port identifier; (ii) the particular storage component to replace at least one masking record, associated with the second host initiator and the at least one same port identifier, with at least one new masking based at least in part on the at least one new port identifier; and (iii) the switch to update one or more zoning records associated with the second host initiator based at least in part on the at least one new port identifier, thereby invalidating the at least one same port identifier on the second host initiator, the particular storage component, and the switch, and reestablishing access for the second host initiator using the at least one new port identifier.
17 . The apparatus of claim 16 , wherein the at least one processing device is further configured:
to maintain validation information that identifies validated ports of at least one of: (i) one or more of the host initiators and (ii) one or more of the storage components, wherein the detecting that the first host initiator comprises the at least one same port identifier as the second host initiator is based at least in part on the monitoring and the validation information.
18 . The apparatus of claim 17 , wherein the validation information further identifies port identifiers of the validated ports.
19 . The apparatus of claim 16 , wherein the instructions to the second host initiator, the particular storage component, and the switch are provided in parallel.
20 . The apparatus of claim 16 , wherein the at least one automated action further comprises:
generating an alert comprising information of the anomalous behavior, wherein the information of the anomalous behavior indicates a location of the first host initiator.