SANtricity express configuration manuals ( CA08872-012 )

Host CHAP Authentication Settings for iSCSI Connections - Linux

To use CHAP authentication, make sure to configure the following settings before establishing an iSCSI session between the initiator and the target.

For settings on the ETERNUS AB/HB series, refer to Configure iSCSI authentication.

For Unidirectional CHAP Authentication

Create the accounts used by the iSCSI initiator to connect to the target. Add the following lines to the /etc/iscsi/iscsid.conf file:

node.session.auth.authmethod = CHAP
node.session.auth.username = <(1)>
node.session.auth.password = <(2)>
discovery.sendtargets.auth.authmethod = CHAP
discovery.sendtargets.auth.username = <(1)>
discovery.sendtargets.auth.password = <(2)>

Enter any username in (1) and any password in (2).

Each username and password must match the ones that are set in the ETERNUS AB/HB series.

For Bidirectional CHAP Authentication

In addition to the unidirectional CHAP authentication accounts, additional accounts are required to enable the target to connect to the initiator. Add the following lines to the /etc/iscsi/iscsid.conf file:

node.session.auth.authmethod = CHAP
node.session.auth.username = <(1)>
node.session.auth.password = <(2)>
node.session.auth.username_in = <(1)>
node.session.auth.password_in = <(2)>
discovery.sendtargets.auth.authmethod = CHAP
discovery.sendtargets.auth.username = <(1)>
discovery.sendtargets.auth.password = <(2)>
discovery.sendtargets.auth.username_in = <(1)>
discovery.sendtargets.auth.password_in = <(2)>

Enter any username in (1) and any password in (2).

  • The initiator accounts are shown below.

    • node.session.auth.username

    • node.session.auth.password

    • discovery.sendtargets.auth.username

    • discovery.sendtargets.auth.password

  • The target accounts are shown below.

    • node.session.auth.username_in

    • node.session.auth.password_in

    • discovery.sendtargets.auth.username_in

    • discovery.sendtargets.auth.password_in

  • Every such initiator and target account must be assigned a unique name.

  • Each username and password must match the ones that are set in the ETERNUS AB/HB series.

Top of Page