[stgt] [PATCH 0/2] targets.conf support for discovery auth

[FUJITA Tomonori]

On Wed, 14 Mar 2012 17:07:50 -0700
Andy Grover <agrover at redhat.com> wrote:

> I've tested that the config settings are applied correctly, but haven't
> been able to do sendtargets when discovery auth is configured. I'm not
> sure if it's target or initiator misconfiguration on my part, but I
> thought submitting this patch would make it easier for others to help
> verify whether the feature works or not. :)

Hmm, seems it works for me.

I set up an account for discovery (add "fujita" account):

root at rose:~# ./git/tgt/usr/tgtadm --op show  --mode sysSystem:
    State: ready
    debug: off
LLDs:
    iscsi: ready
Backing stores:
    rdwr (bsoflags sync:direct)
    aio
    ssc
    null
    bsg
    sg
Device types:
    passthrough
    tape
    changer
    controller
    osd
    cd/dvd
    disk
    Account information:

    fujita
iSNS:
    iSNS=Off
    iSNSServerIP=
    iSNSServerPort=3205
    iSNSAccessControl=Off


And the discovery fails:

root at peach:/home/fujita# ./open-iscsi/usr/iscsiadm -m discoverydb -t st -p 10.76.0.1 --discover
iscsiadm: Login failed to authenticate with target 
iscsiadm: discovery login to 10.76.0.1 rejected: initiator failed
authorization

iscsiadm: Could not perform SendTargets discovery: iSCSI login failed
due to authorization failure


I configure the initiator side:

root at peach:/home/fujita# ./open-iscsi/usr/iscsiadm -m discoverydb
--type st --portal 10.76.0.1# BEGIN RECORD 2.0-872
discovery.startup = manual
discovery.type = sendtargets
discovery.sendtargets.address = 10.76.0.1
discovery.sendtargets.port = 3260
discovery.sendtargets.auth.authmethod = CHAP
discovery.sendtargets.auth.username = fujita
discovery.sendtargets.auth.password = ********
discovery.sendtargets.auth.username_in = <empty>
discovery.sendtargets.auth.password_in = <empty>
discovery.sendtargets.timeo.login_timeout = 15
discovery.sendtargets.use_discoveryd = No
discovery.sendtargets.discoveryd_poll_inval = 30
discovery.sendtargets.reopen_max = 5
discovery.sendtargets.timeo.auth_timeout = 45
discovery.sendtargets.timeo.active_timeout = 30
discovery.sendtargets.iscsi.MaxRecvDataSegmentLength = 32768
# END RECORD


Then, the discovery works:

root at peach:/home/fujita# ./open-iscsi/usr/iscsiadm -m discoverydb
--type st --portal 10.76.0.1 --discover
10.76.0.1:3260,1 iqn.2001-04.com.example:storage.sr.rose.sys1.xyz
--
To unsubscribe from this list: send the line "unsubscribe stgt" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html