Este contenido no está disponible en el idioma seleccionado.
25.3. Setting up the Challenge-Handshake Authentication Protocol
After configuring an ACL and creating an iSCSI initiator, set up the Challenge-Handshake Authentication Protocol (CHAP). For more information on configuring an ACL and creating an iSCSI initiator, see Section 25.1.6, “Configuring ACLs” and Section 25.2, “Creating an iSCSI Initiator”.
The CHAP allows the user to protect the target with a password. The initiator must be aware of this password to be able to connect to the target.
Procedure 25.8. Setting up the CHAP for target
- Set attribute authentication:
/iscsi/iqn.20...mple:444/tpg1> set attribute authentication=1 Parameter authentication is now '1'.
/iscsi/iqn.20...mple:444/tpg1> set attribute authentication=1 Parameter authentication is now '1'.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Set userid and password:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Procedure 25.9. Setting up the CHAP for initiator
- Edit the
iscsid.conf
file:- Enable the CHAP authentication in the
iscsid.conf
file:vi /etc/iscsi/iscsid.conf
# vi /etc/iscsi/iscsid.conf node.session.auth.authmethod = CHAP
Copy to Clipboard Copied! Toggle word wrap Toggle overflow By default, thenode.session.auth.authmethod
option is set toNone
. - Add target user name and password in the
iscsid.conf
file:node.session.auth.username = redhat node.session.auth.password = redhat_passwd
node.session.auth.username = redhat node.session.auth.password = redhat_passwd
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
- Restart the
iscsid
service:systemctl restart iscsid.service
# systemctl restart iscsid.service
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
For more information, see the
targetcli
and iscsiadm
man pages.