CHAP Authentication transition Error

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi ,
I'm looking for help in understanding the CHAP authentication (Non Mutual) behavior of LIO Target.
I am sending a the login request in following order-

I-> T : Login request with TargetName,InitiatorName,AuthMethod=CHAP.
T-> I : AuthMethod=CHAP. TargetAlias=LIO Target,TargetProtalGroup=1
I ->T : Login request with  CHAP_A=5
T ->I : CHAP_A=5,CHAP_I=X ,CHAP_C="<some challenge>"
I ->T : Login request with No parameters, Tbit=1,CSG bit =0, NSG bit =3
T ->I : Success.

According to the RFC3270 clause section 8.2. I am expecting a login reject for a last Login request (forced transit to Full Feature Phase )
but the Target sends a success.

RFC 3720: Section 8.2
----------------------<snip>-----------------------
"Whenever an iSCSI target gets a response whose keys, or their values, are not according to the step definition, it MUST answer with a Login reject with the "Initiator Error" or "Missing Parameter" status."
---------------------<snip>------------------------

If I check the dmesg, it shows Login Failed. I have also attached the pcap for the same.

Am I looking at an error in LIO CHAP implementation? I am expecting a initiator Error at this point However still maintains its state at Security negotiation.
Your comment Please.

[root@root chap]# dmesg -c
[319510.995369] iSCSI Login negotiation failed.
[root@root chap]#


My machine details:
[root@root chap]# uname -a
Linux root 3.15.0-rc3+ #1 SMP Mon May 19 17:35:27 IST 2014 x86_64 x86_64 x86_64 GNU/Linux
[root@root chap]#
[root@root test_suite_iscsi]# cat /sys/kernel/config/target/iscsi/lio_version
Datera Inc. iSCSI Target v4.1.0

--
Thanks and regards.
Tejas Vaykole
Development Engineer.
Calsoft Inc.

Attachment: CHAP_auth
Description: Binary data


[Index of Archives]     [Linux SCSI]     [Kernel Newbies]     [Linux SCSI Target Infrastructure]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Linux IIO]     [Device Mapper]

  Powered by Linux