Hello Nab, > So while when discovery authentication is disabled, any initiator can > obtain the list of targets through sendtargets discovery, but default, > they are *not* allowed to login to any target endpoint without an > explicit NodeACL, nor without per NodeACL CHAP authentication > credentials. I have the same problem as Ben. I don't want to enable discovery authentication but at the same time I want that only targets are discovered that are either in demo mode or have at least one LUN with a node acl presented. Are you willing to add such a feature to the code, if so would you prefer to write a patch by yourself or should I do a proposal? Cheers, Thomas -- To unsubscribe from this list: send the line "unsubscribe target-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html