Hello, I still culdn't find out the mappings between the open-iscsi authentication settings and the MPX100 settings:
The MPX100 allows to set a CHAP secret (but no name) for these categories the portal (two interfaces) the initiator (several) the target (a fixed number like 4) Specifically there is no CHAP secret for a LUN or so. In open-iscsi I can set "node.session.auth" and "discovery.sendtargets.auth". I would assume that for successful discovery I have to set the initiator's name as "username" and a common secret (set for the initiator on the MPX100) as "password". (If I'd set the secret for the portal, all initiators would have to use the same secret, and that would not make much sense IMHO). I could never get that working. For a successful session I'd assume to use the same settings as described above. I'm completely clueless on what to set for "mutual authentication". Also on Windows, I can set a secret per target connection (for sessions), as well as a secret for discovery. I I understood everything correctly, I cannot set different secrets for individual targets in open-iscsi. Unfortunately none of the docs I have found so far helped to make things more clear. In open-iscsi the "username" and "username_in" are very much confusing, as iSCSI talks about "InitiatorName" and "TargetName" when describing authentication. Here are the comments: # To enable CHAP authentication set node.session.auth.authmethod # to CHAP. The default is None. #node.session.auth.authmethod = CHAP # To set a CHAP username and password for initiator # authentication by the target(s), uncomment the following lines: #node.session.auth.username = username #node.session.auth.password = password # To set a CHAP username and password for target(s) # authentication by the initiator, uncomment the following lines: #node.session.auth.username_in = username_in #node.session.auth.password_in = password_in # To enable CHAP authentication for a discovery session to the target # set discovery.sendtargets.auth.authmethod to CHAP. The default is None. #discovery.sendtargets.auth.authmethod = CHAP # To set a discovery session CHAP username and password for the initiator # authentication by the target(s), uncomment the following lines: #discovery.sendtargets.auth.username = username #discovery.sendtargets.auth.password = password # To set a discovery session CHAP username and password for target(s) # authentication by the initiator, uncomment the following lines: #discovery.sendtargets.auth.username_in = username_in #discovery.sendtargets.auth.password_in = password_in Am I more stupid than anybody else? Regards, Ulrich --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "open-iscsi" group. To post to this group, send email to open-iscsi@googlegroups.com To unsubscribe from this group, send email to open-iscsi+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/open-iscsi -~----------~----~----~----~------~----~------~--~---
