Re: [linux-iscsi-users] Authentication problems with different discovery and target credentials

[Gregory Y. <gyo...@in...>]

Thanks,

I ended up moving to Debian 4 and the Open iSCSI initiator. Plus, I
found out there was a problem when using both discovery and target chap
secrets.=20

Greg

-----Original Message-----
From: Mike Christie [mailto:mic...@cs...]=20
Sent: Monday, April 16, 2007 9:45 AM
To: Gregory Youngblood
Cc: lin...@li...
Subject: Re: [linux-iscsi-users] Authentication problems with different
discovery and target credentials

Gregory Youngblood wrote:
> I'm using CentOS 4.4 and the included linux-iscsi initiator (4.0.3).
>=20
> I have it working for the most part. I am able to connect to targets
without any authentication, and if some cases if the discovery and
target authentication are identical. However, if discovery uses one
username/password and the target uses different credentials, then the
initiator fails to connect, ending with the messages:
>=20
> Login failed to authenticate with target
> discovery login to 192.168.171.17 rejected: initiator error (02/01),
non-retryable, giving up
>=20
> This is fine if the target I am connecting to is another Linux system
where I can control these details, however I'm trying to connect with an
HP MSA1510i, which so far is failing to work. Of course, Windows with
the iSCSI 2.0 from Microsoft is working perfectly, using different
discovery and target credentials, connecting to either the MSA1510i or
the Linux iSCSI targets.
>=20
> So, assuming you need to connect to a target that requires credentials
for discovery and a second set of credentials for the targets, how would
the config file look? Or, is that even support by this revision of the
initiator?=20
>=20

I do not think this is possible with linux-iscsi. You might be able to
do this:

DiscoveryAddress=3D192.168.10.94
  IncomingUsername=3Dmary
  IncomingPassword=3Dkdhjkd9l

The above line will set the CHAP settings for that discovery address and
targets discovered from it.

TargetName=3Diqn.1987-05.com.cisco:00.0d1d898e8d66.t0
  IncomingUsername=3Dmary2
  IncomingPassword=3D9089080

But for many other values if you do something like the above, it will
override global settings for that specific target.