Managing CHAP Accounts for Virtuozzo Storage iSCSI Targets

Virtuozzo Storage allows you to restrict access to iSCSI targets by means of CHAP authentication.

To make use of CHAP authentication, you need to:

1. Create a CHAP account.
2. Create an iSCSI target bound to this CHAP account.

These actions are described in detail in the following subsections.

Creating CHAP Accounts for Virtuozzo Storage iSCSI Targets

To create a CHAP account, use the pstorage-iscsi account-create command. For example, to create the CHAP account user1:

# pstorage-iscsi account-create -u user1

Enter password:

Verify password:

Note: The password should be 12 to 16 characters long for Windows clients to be able to establish connection.

Creating Virtuozzo Storage iSCSI Targets Bound to CHAP Accounts

To create a Virtuozzo Storage iSCSI target bound to a CHAP account, use the pstorage-iscsi create command with the additional -u option. For example, create a target bound to the CHAP account user1:

# pstorage-iscsi create -n test1 -a 192.168.10.100 -u user1

IQN: iqn.2014-04.com.pstorage:test1

Changing the CHAP Account Password

To change the password of a CHAP account, use the pstorage-iscsi account-set command. For example, to change the password of the CHAP account user1:

# pstorage-iscsi account-set -u user1

Enter password:

Verify password:

Note: The password should be 12 to 16 characters long for Windows clients to be able to establish connection.

The new password will become active after target reboot.

Listing CHAP Accounts and Virtuozzo Storage iSCSI Targets Assigned to Them

To list existing CHAP accounts, use the pstorage-iscsi account-list command. For example:

# pstorage-iscsi account-list

user1

To list Virtuozzo Storage iSCSI targets assigned to a specific CHAP account, use the pstorage-iscsi account-list command with the -u option. For example, to list iSCSI targets assigned to the CHAP account user1:

# pstorage-iscsi account-list -u user1

iqn.2014-04.com.pstorage:test1