On Nov 30, 2012, at 3:46 AM, Gabriele Bulfon <[email protected]> wrote:
> Hi, not just an illumos issue, but a general question about iscsi targets. Don't blame iSCSI or the iSCSI target. This is how SCSI is designed to work. Think how much fun we had before zoning was commonplace on FC SANs... drop an NT box on the SAN and the administrator could happily format an NTFS file system on the LUs :-O Today, people use zoning as a normal process for managing access for FC SANs, and they use host groups, target portal groups, and logins to perform the same functions on iSCSI. -- richard > > I happened into a stupid event, because of my mistake. > > I forgot to allow iscsi initiator to listen on the SAN network only, so it > was listening on the CIFS network too. > I created some sample volumes and shared iscsi, without restricting them to a > single client. > Someone in the LAN enjoyed his Windows7 iscsi initiator and found the disks > in the LAN, so he came to me and > told me about his discovery, and I told him they were just sample for my > tests and not to use them. > He disconnected the iscsi initiator. > > Later, I attached these sample volumes to a Windows server, via direct iscsi > from Windows (not a vmware one). > So, the resource was NTFS formatted. > > After sometime, this volume became corrupted, the NTFS filesystem was a mess. > I discovered that the boy's Windows7 remembered the initiator, and all by > itself it discovered the resource, > found that it was NTFS formatted, and decided it should be mounted > automatically, with no question! > The boy did not notice it for some hours, then he found the new disk in "My > Computer". > He disconnected again the resource, and found it was stored as a preferred > destination (this doesn't mean you f*** windows are allowed to decide to > mount everything NTFS around!!), removed it and came to me to warn me about > it. > What happened, is that his f*** windows7's antivirus started scanning the new > disk with no advice, so corrupting... > > Now. > I understand my fault. > Did not let the initiator work only on the SAN network. > Did not let the iscsi share be assigned to one and only iscsi client. > But, my question is: > > What is the meaning of allowing an iscsi server initiator to allow the use of > a raw shared device to multiple clients? > Isn't this unsafe in any case? > > Anyway, Window's a f*** devil! ;) > > Gabriele. > illumos-discuss | Archives | Modify Your Subscription -- [email protected] +1-760-896-4422 ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be Modify Your Subscription: https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4 Powered by Listbox: http://www.listbox.com
