Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authentication Configuration #5

Open
vifino opened this issue Feb 11, 2024 · 0 comments
Open

Authentication Configuration #5

vifino opened this issue Feb 11, 2024 · 0 comments
Labels
enhancement New feature or request
Milestone

Comments

@vifino
Copy link
Owner

vifino commented Feb 11, 2024

I read the nvme target source code again.
Turns out I was wrong about not needing host config.

Host configuration is required for authentication:

  • /hosts/<nqn>/dhchap_key
  • /hosts/<nqn>/dhchap_ctrl_key
  • /hosts/<nqn>/dhchap_hash
  • /hosts/<nqn>/dhchap_dhgroup

This might need a rethink, presumably requires tweaking the automatic allowed-hosts stuff as well.
I definitely do not want to have the config file contain hosts without encryption parameters.

Note: Needs CONFIG_NVME_TARGET_AUTH set, which isn't set by default and not explicitly on NixOS.

@vifino vifino added this to the v1.0 milestone Feb 11, 2024
@vifino vifino changed the title Encryption Configuration Authentication Configuration Mar 9, 2024
@vifino vifino added the enhancement New feature or request label Mar 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant