您当前的位置： 首页 > 学无止境 > 心得笔记 网站首页心得笔记

iscsi-iscsi的用户认证与持久化(target通过配置文件实现)

发布时间：2019-05-26 18:24:09编辑：雪饮阅读（）

上次讲到iscsi的搭建和基础应用，这次讲下iscsi的用户认证与持久化(target通过配置文件实现)

登出iscsi

[root@node1 ~]# iscsiadm -m node -T xy220807 -p 192.168.2.189 -u

Logging out of session [sid: 1, target: xy220807, portal: 192.168.2.189,3260]

Logout of [sid: 1, target: xy220807, portal: 192.168.2.189,3260] successful.

删除本地登录会话凭证(防止默认自动登录)

[root@node1 ~]# iscsiadm -m node -T xy220807 -p 192.168.2.189 -o delete

基于用户认证

服务端：

先创建认证用户，再将认证用户绑定到target上

[root@nfs ~]# tgtadm --lld iscsi --mode account --op new --user iscsiuser --password iscsiuser

[root@nfs ~]# tgtadm --lld iscsi --mode account --op bind --tid 1 --user iscsiuser

客户端：

/etc/iscsi/iscsid.conf

node.session.auth.authmethod = CHAP

node.session.auth.username = iscsiuser

node.session.auth.password = iscsiuser

然后重启服务就可以登录了

[root@node1 ~]# service iscsi restart

iscsiadm: No matching sessions found

Stopping iSCSI daemon:

iscsid is stopped                                          [  OK  ]

Starting iSCSI daemon:                                     [  OK  ]

                                                           [  OK  ]

Setting up iSCSI targets: Logging in to [iface: default, target: xy220807, portal: 192.168.2.189,3260] (multiple)

Login to [iface: default, target: xy220807, portal: 192.168.2.189,3260] successful.

                                                           [  OK  ]

[root@node1 ~]# iscsiadm -m node -T xy220807 -p 192.168.2.189 -l

target持久化

在服务端通过命令配置target每当服务重启后就不存在了，需要重新配置。

/etc/tgt/targets.conf文件中可以持久化配置target配置项

<target xy220807>

        backing-store /dev/sdc1

        incominguser iscsiuser iscsiuser

        initiator-address 192.168.2.0/24

</target>

更细致的配置如：

 

<target xy220807>

        <backing-store /dev/sdc1>

                vendor_id mage.du

                lun 6

        </backing-store>

        <backing-store /dev/sdc2>

                vendor_id mage.du

                lun 7

        </backing-store>

        incominguser iscsiuser iscsiuser

        initiator-address 192.168.2.0/24

</target>

重启服务后如：

[root@nfs ~]# tgtadm --lld iscsi --mode target --op show

Target 1: xy220807

    System information:

        Driver: iscsi

        State: ready

    I_T nexus information:

    LUN information:

        LUN: 0

            Type: controller

            SCSI ID: IET     00010000

            SCSI SN: beaf10

            Size: 0 MB, Block size: 1

            Online: Yes

            Removable media: No

            Readonly: No

            Backing store type: null

            Backing store path: None

            Backing store flags:

        LUN: 6

            Type: disk

            SCSI ID: IET     00010006

            SCSI SN: beaf16

            Size: 10010 MB, Block size: 512

            Online: Yes

            Removable media: No

            Readonly: No

            Backing store type: rdwr

            Backing store path: /dev/sdc1

            Backing store flags:

        LUN: 7

            Type: disk

            SCSI ID: IET     00010007

            SCSI SN: beaf17

            Size: 11458 MB, Block size: 512

            Online: Yes

            Removable media: No

            Readonly: No

            Backing store type: rdwr

            Backing store path: /dev/sdc2

            Backing store flags:

    Account information:

        iscsiuser

    ACL information:

        192.168.2.0/24