Re: SHA-1 hashing Algorithm for CHAP

2015-01-03 Thread Paul Koning
What is SCST? Various crypto protocols indeed uses SHA-1 (typically in more complex form like HMAC) for message authentication. And each of them will obviously have some identifier for that. But that has nothing to do with CHAP. For CHAP in iSCSI, you have to look in the iSCSI RFC, and yo

Re: SHA-1 hashing Algorithm for CHAP

2015-01-08 Thread Paul Koning
> On Jan 8, 2015, at 9:30 AM, Tejas vaykole wrote: > > ... >> Various crypto protocols indeed uses SHA-1 (typically in more complex form >> like HMAC) for message authentication. And each of them will obviously have >> some identifier for that. But that has nothing to do with CHAP. For CHAP

Re: [LSF/MM TOPIC] iSCSI MQ adoption via MCS discussion

2015-01-08 Thread Paul Koning
> On Jan 8, 2015, at 9:11 AM, Bart Van Assche wrote: > > On 01/08/15 14:45, Sagi Grimberg wrote: >> Actually I started with that approach, but the independent connections >> under a single session (I-T-Nexus) violates the command ordering >> requirement. Plus, such a solution is specific to iSER

Re: NIC-packet errors when iSER done on RAM

2015-10-14 Thread Paul Koning
RoCE? If I remember right, that protocol has nothing to do with iSCSI. paul > On Oct 9, 2015, at 7:51 AM, dinesh...@vvdntech.in wrote: > > Hi, > > We are using > Soft-RoCE ... -- You received this message because you are subscribed to the Google Groups "open-iscsi" group. To unsubs

Re: login fails

2016-06-22 Thread Paul Koning
> On Jun 21, 2016, at 11:38 PM, electric0...@gmail.com wrote: > > Hi everybody. > > I have the question > > log : > iscsiadm: initiator reported error (13 - daemon access denied) > iscsiadm: Could not log into all portals > > Could you tell me the reason? Sure. Something is wrong. If yo

Re: [kernel-hardening] [PATCH v4 06/13] iscsi: ensure RNG is seeded before use

2017-06-17 Thread Paul Koning
> On Jun 17, 2017, at 10:23 AM, Jeffrey Walton wrote: > > On Fri, Jun 16, 2017 at 11:45 PM, Lee Duncan wrote: >> On 06/16/2017 05:41 PM, Jason A. Donenfeld wrote: >>> Hi Lee, >>> >>> On Fri, Jun 16, 2017 at 11:58 PM, Lee Duncan wrote: It seems like what you are doing is basically "good",

Re: Antw: Re: [kernel-hardening] Re: [PATCH v4 06/13] iscsi: ensure RNG is seeded before use

2017-07-05 Thread Paul Koning
> On Jul 5, 2017, at 3:08 AM, Ulrich Windl > wrote: > Jeffrey Walton schrieb am 17.06.2017 um 16:23 in Nachricht > : > > [...] >> But its not clear to me how to ensure uniqueness when its based on >> randomness from the generators. > > Even with a perfect random generator non-uniq

Re: How to address more than one LUN in a target

2018-04-11 Thread Paul Koning
Gerry, I'm not sure I understand the question. iSCSI doesn't talk to LUNs, it talks to iSCSI targets. You address targets (by their IP address). Once you're talking to a target, iSCSI provides a path for SCSI to do its thing with that target. One of the things SCSI (not iSCSI) does is ask th

Re: iSCSI Multiqueue

2020-01-24 Thread Paul Koning
> On Jan 24, 2020, at 3:43 AM, Vladislav Bolkhovitin wrote: > > >> ... > > From my old iSCSI target development days, MS is fundamentally not > friendly to multi-queue, because it requires by the iSCSI spec to > preserve order of commands inside the session across multiple > connections. Com

Re: Antw: [EXT] ISCSI Target and Initiator on same host

2021-06-30 Thread Paul Koning
> On Jun 30, 2021, at 7:29 AM, Ulrich Windl > wrote: > > I think I did that about 10 years ago... > Riaan Pretorius schrieb am 30.06.2021 um 12:41 > in Nachricht <07b30064-72b3-42c1-ae71-f40c885c06...@googlegroups.com>: >> I have an interesting question to ask: >> >> Is it possi

Re: Frequent Connection Errors with Dell Equallogic RAID

2008-12-10 Thread Paul Koning
> "Evan" == Evan Broder <[EMAIL PROTECTED]> writes: Evan> Looking at the RAID configuration, we have the "Group IP Evan> address" set to 10.5.128.128, and the member NIC's IP address Evan> set to 10.5.128.129. The persistent portal os 10.5.128.128 on Evan> all four servers, and the curren

Re: Does iSCSI supports Internet Protocol version 6?

2009-05-05 Thread Paul Koning
> "Ulrich" == Ulrich Windl writes: Ulrich> On 4 May 2009 at 16:03, StorageSolutionGroup wrote: >> hi, >> >> We are having IBM Storage and we are going to implement IPv6 in >> our company. I have following doubts : >> >> Does iSCSI supports Internet Protocol version 6? Ulrich> I j

RE: Can anybody confirm that bnx2i on 5709 cards works withEquallogic 6xxx?

2010-01-25 Thread Paul Koning
> Hmm.. will this cause problems with Equallogic storage? > Equallogic prefers having all the initiators (and targets) in the same > IP subnet. Not quite. It supports both single and multi subnet configurations. (There are some specific rules for multi subnet configurations which are documented.)

Re: iSCSI SAN on copper 10Gbe

2010-08-16 Thread Paul Koning
10G is 10G -- so long as the cabling has been correctly built so the error rate is acceptably low, the performance will be the same as for any other PHY. paul On Aug 13, 2010, at 1:06 PM, Valerio wrote: > Has anyone built an iSCSI SAN on 10Gbe copper and willing to share > read/write pe

Re: Serial number comparison improvement

2011-03-07 Thread Paul Koning
On Mar 3, 2011, at 4:27 PM, Rustad, Mark D wrote: > Folks, > > I noticed some code in libiscsi used for comparing serial numbers that I > think can be improved. Specifically this: > > /* Serial Number Arithmetic, 32 bits, less than, RFC1982 */ > #define SNA32_CHECK 2147483648UL > > static int

Re: iSCSI over WAN

2011-03-11 Thread Paul Koning
(local) not WAN ... so when I try to > connect it fails. > > Thank You, > > Ravi Brounstein > Helpdesk Team > Deus Machine, LLC > http://www.deusmachine.com > Tel. 877.840.6024 x 101 > > On Mar 10, 2011, at 12:13 PM, "Paul Koning" wrote: > >&g

Re: iSCSI over WAN

2011-03-11 Thread Paul Koning
iSCSI over WAN doesn't make much sense. You're right, the discovery machinery sends IP addresses, which won't work if the target is behind NAT. If you can tell the client to connect directory to a configured target IP address, that might work. It sounds like your client side has NAT; I don't

Bad IPv6 address

2011-04-08 Thread Paul Koning
I'm not sure if this is the right place to report this... On my Linux system, when I have a connection to a target with IPv6, the address shown in /sys/class/iscsi_session/device/connection*/target_address is invalid. For example, I've seen fc00:00:00:00:10:127:137:101 which is not a valid add

Re: Antw: [PATCH] iscsi: Simplify serial number comparisons

2011-04-08 Thread Paul Koning
On Apr 8, 2011, at 1:22 PM, Rustad, Mark D wrote: > Ulrich, > > On Apr 7, 2011, at 11:35 PM, Ulrich Windl wrote: > >> I just wonder how safe the code is: >> >> Doesn't the difference of two unsigned ints give an unsigned value? The >> assigning an unsigned int to a signed int will definitely

Re: Bad IPv6 address

2011-04-11 Thread Paul Koning
On Apr 8, 2011, at 8:41 PM, Mike Christie wrote: > On 04/08/2011 10:58 AM, Paul Koning wrote: >> I'm not sure if this is the right place to report this... >> >> On my Linux system, when I have a connection to a target with IPv6, the >> address shown in

Re: Bad IPv6 address

2011-04-11 Thread Paul Koning
On Apr 9, 2011, at 12:33 AM, Mike Christie wrote: > On 04/08/2011 07:52 PM, Paul Koning wrote: >> What made me look at this is the fact that I was getting errors connecting >> to this address. But now that I'm trying it again, it works just fine. So >> it's cle

Re: Getting log "Login authentication failed with target .." during login-redirect

2014-08-04 Thread Paul Koning
No, that's incorrect. You're assuming that the coding of the lower byte in the 16-bit response is a single global code space independent of the upper byte. That is not how the RFC is written. Instead, the entire 16 bit value is the code, and you must interpret it as a unit. This is completely

Re: Getting log "Login authentication failed with target .." during login-redirect

2014-08-04 Thread Paul Koning
On Jul 30, 2014, at 2:19 AM, KUMAR NITISH wrote: > Hi all, > > I am using Dell EqualLogic array as target. When I make session with this > target, I am getting logs as given below : > > login response status 0101 > Login authentication failed with target > iqn.2001-05.com.equallogic:0-8a0906

Re: Getting log-message "Login authentication failed with target .." during iSCSI login-redirect

2014-08-14 Thread Paul Koning
Nitish, We discussed this a few weeks ago. The message is misleading, because there is no authentication error here. I believe it's just a trace message you should simply ignore. It would be good for the wording to be fixed because the current wording is misleading. paul On Aug 14,

Re: SHA-1 hashing Algorithm for CHAP

2014-09-15 Thread Paul Koning
I have never seen a spec for CHAP with any other hash algorithms. No spec, so no implementations. paul On Sep 11, 2014, at 6:22 AM, Tejas vaykole wrote: > Hello, > > I am trying out with the open-iscsi initiator.I see that the initiator uses > MD5 algorithm for CHAP. > I need help i

Re: SHA-1 hashing Algorithm for CHAP

2014-09-15 Thread Paul Koning
On Sep 15, 2014, at 1:19 PM, Mike Christie wrote: > On 09/11/2014 05:22 AM, Tejas vaykole wrote: >> Hello, >> >> I am trying out with the open-iscsi initiator.I see that the initiator >> uses MD5 algorithm for CHAP. >> I need help in configuring the initiator to use SHA-1 hashing Algorithm >> f

Re: twice mounted LUN with iscsiadm login ?

2014-10-22 Thread Paul Koning
On Oct 22, 2014, at 12:39 PM, Laurent HENRY wrote: > Hello, > I am noticing a strange behavior with one of my Linux server (Opensuse > 13.1 with open-iscsi) > > While connecting manually to a iscsi node, my lun is getting mounted twice. > This produce troubles on my iscsi disk array, whi

Re: bulk writes in iSCSI

2014-11-03 Thread Paul Koning
On Nov 3, 2014, at 6:10 AM, shivraj dongawe wrote: > Hi all, > > Suppose I have information about some lba's and lengths. >I want to send more than one write command as a part of single pdu. >I want to know whether I could perform this activity using iSCSI? That woul

Re: bulk writes in iSCSI

2014-11-05 Thread Paul Koning
On Nov 4, 2014, at 11:22 PM, shivraj dongawe wrote: > Dear Ulrich, > > Is there any concrete implementation available for scatter/gather > mechanism ? > If available, how could we use with iSCSI initiator and target > combination? > > Thanks and Regards > > Shivraj K Dongawe

Re: Getting log-message "Login authentication failed with target .." during iSCSI login-redirect

2014-12-11 Thread Paul Koning
EqualLogic arrays always do a redirect, because you connect to the group address and you are redirected by the connection balancer to a specific interface IP address. The initiator is wrong to call code 0101 a “login error”. The RFC is perfectly clear that redirect is NOT an error condition.