ceph/doc/rbd/iscsi-initiator-linux.rst
Ilya Dryomov dabcac2060 doc/rbd: add mutual CHAP authentication example
Based on https://github.com/ceph/ceph-iscsi/pull/260.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
2022-05-30 13:51:49 +02:00

114 lines
3.0 KiB
ReStructuredText
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-------------------------
iSCSI Initiator for Linux
-------------------------
**Prerequisite:**
- Package ``iscsi-initiator-utils``
- Package ``device-mapper-multipath``
**Installing:**
Install the iSCSI initiator and multipath tools:
::
# yum install iscsi-initiator-utils
# yum install device-mapper-multipath
**Configuring:**
#. Create the default ``/etc/multipath.conf`` file and enable the
``multipathd`` service:
::
# mpathconf --enable --with_multipathd y
#. Add the following to ``/etc/multipath.conf`` file:
::
devices {
device {
vendor "LIO-ORG"
product "TCMU device"
hardware_handler "1 alua"
path_grouping_policy "failover"
path_selector "queue-length 0"
failback 60
path_checker tur
prio alua
prio_args exclusive_pref_bit
fast_io_fail_tmo 25
no_path_retry queue
}
}
#. Restart the ``multipathd`` service:
::
# systemctl reload multipathd
**iSCSI Discovery and Setup:**
#. Enable CHAP authentication and provide the initiator CHAP username
and password by uncommenting and setting the following options in
``/etc/iscsi/iscsid.conf`` file:
::
node.session.auth.authmethod = CHAP
node.session.auth.username = myusername
node.session.auth.password = mypassword
If mutual (bidirectional) authentication is used, also provide the
target CHAP username and password:
::
node.session.auth.username_in = mytgtusername
node.session.auth.password_in = mytgtpassword
#. Discover the target portals:
::
# iscsiadm -m discovery -t st -p 192.168.56.101
192.168.56.101:3260,1 iqn.2003-01.org.linux-iscsi.rheln1
192.168.56.102:3260,2 iqn.2003-01.org.linux-iscsi.rheln1
#. Login to target:
::
# iscsiadm -m node -T iqn.2003-01.org.linux-iscsi.rheln1 -l
**Multipath IO Setup:**
The multipath daemon (``multipathd``), will set up devices automatically
based on the ``multipath.conf`` settings. Running the ``multipath``
command show devices setup in a failover configuration with a priority
group for each path.
::
# multipath -ll
mpathbt (360014059ca317516a69465c883a29603) dm-1 LIO-ORG ,IBLOCK
size=1.0G features='0' hwhandler='1 alua' wp=rw
|-+- policy='queue-length 0' prio=50 status=active
| `- 28:0:0:1 sde 8:64 active ready running
`-+- policy='queue-length 0' prio=10 status=enabled
`- 29:0:0:1 sdc 8:32 active ready running
You should now be able to use the RBD image like you would a normal
multipathd iSCSI disk.
4. Logout from target:
::
# iscsiadm -m node -T iqn.2003-01.org.linux-iscsi.rheln1 -u