summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorChris Leech <cleech@redhat.com>2019-11-24 13:51:09 -0800
committerChris Leech <cleech@redhat.com>2019-12-19 22:11:36 -0800
commitd3daa7a2bc3f5bca874d3efd072b34a657c4d492 (patch)
tree9edc60f5574e36c869581a6e1d332bb94856ebd4 /etc
parent4440e57a59c7f1c23bbfdcb10844017f478918b6 (diff)
downloadopen-iscsi-d3daa7a2bc3f5bca874d3efd072b34a657c4d492.tar.gz
configuration support for CHAP algorithms
Introduces support for preference lists in configuration files, and uses that for the 'node.session.auth.chap_algs' setting. This is also re-used for discovery authentication, rather than have two different configurations.
Diffstat (limited to 'etc')
-rw-r--r--etc/iscsid.conf7
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/iscsid.conf b/etc/iscsid.conf
index 70985af..58f6040 100644
--- a/etc/iscsid.conf
+++ b/etc/iscsid.conf
@@ -57,6 +57,13 @@ node.leading_login = No
# to CHAP. The default is None.
#node.session.auth.authmethod = CHAP
+# To configure which CHAP algorithms to enable set
+# node.session.auth.chap_algs to a comma seperated list.
+# The algorithms should be listen with most prefered first.
+# Valid values are MD5, SHA1, SHA256, and SHA3-256.
+# The default is MD5.
+#node.session.auth.chap_algs = SHA3-256,SHA256,SHA1,MD5
+
# To set a CHAP username and password for initiator
# authentication by the target(s), uncomment the following lines:
#node.session.auth.username = username