This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!



I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!

iSCSI authentication (CHAP)

iSCSI over TCP/IP.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
amiryo
NewUser
NewUser
Posts: 1
Joined: 14 Jul 2015 20:57
Status: Offline

iSCSI authentication (CHAP)

Post by amiryo »

Hi,
I have a question regarding the iSCSI authentication.
I don't find in the iSCSI PDU header any field for authentication. So how does it work ? Am I missing something ?
Thanks,
Amir
Last edited by amiryo on 14 Jul 2015 21:51, edited 1 time in total.

User avatar
STAMSTER
Starter
Starter
Posts: 72
Joined: 23 Feb 2014 15:58
Status: Offline

Re: iSCSI authentication (CHAP)

Post by STAMSTER »

  • After the link is made, the server sends a challenge message to the connection requestor. The requestor responds with a value obtained by using a one-way hash function.
  • The server checks the response by comparing it its own calculation of the expected hash value.
  • If the values match, the authentication is acknowledged; otherwise theconnection is usually terminated.
At any time, the server can request the connected party to send a new challenge message. Because CHAP identifiers are changed frequently and because authentication can be requested by the server at any time, CHAP provides more security than PAP. RFC1334 defines both CHAP and PAP.

More info: h**p://www.cisco.com/c/en/us/support/docs/wan/ ... -chap.html
rIPMI

Post Reply

Return to “iSCSI (Internet Small Computer Systems Interface)”