为ISCSI存储服务器配置CHAP认证。

本文在上文的基础上添加 CHAP 认证，以便规范存储的访问。避免负责网络的存储破坏。
    服务器端：
        1）服务器端首先要保证相应客户端的Ip访问允许。例如：

tgtadm -m target --op bind -t 1 -I 10.11.4.28
保证10.11.4.28能够访问连接目标1。

       2）创建帐户。

tgtadm -m account --op new --user bobo --password qwer1234
用户bobo 密码qwer1234

       3)邦定在某个连接目标。

tgtadm -m account --op bind -t 1 --user bobo
为连接目标1，邦定帐户bobo

     客户端 ：
      1）配置帐户信息。

node.session.auth.authmethod = CHAP            //认证方式
node.session.auth.username = bobo              //用户名
node.session.auth.password = qwer1234          //密码

     2）探测连接目标。

iscsiadm -m discovery -t st -p 10.11.4.26
10.11.4.26:3260,1 a_test_target@10.11.4.26
10.11.4.26为服务器ip，a_test_target@10.11.4.26为发现的目标连接。

     3）察看目标信息。

[root@centos ~]# iscsiadm -m node -T a_test_target@10.11.4.26
# BEGIN RECORD 6.2.0-873.13.el6
node.name = a_test_target@10.11.4.26
node.tpgt = 1
node.startup = automatic
node.leading_login = No
iface.hwaddress = <empty>
iface.ipaddress = <empty>
iface.iscsi_ifacename = default
iface.net_ifacename = <empty>
iface.transport_name = tcp
iface.initiatorname = <empty>
iface.state = <empty>
iface.vlan_id = 0
iface.vlan_priority = 0
iface.vlan_state = <empty>
iface.iface_num = 0
iface.mtu = 0
iface.port = 0
iface.bootproto = <empty>
iface.subnet_mask = <empty>
iface.gateway = <empty>
iface.dhcp_alt_client_id_state = <empty>
iface.dhcp_alt_client_id = <empty>
iface.dhcp_dns = <empty>
iface.dhcp_learn_iqn = <empty>
iface.dhcp_req_vendor_id_state = <empty>
iface.dhcp_vendor_id_state = <empty>
iface.dhcp_vendor_id = <empty>
iface.dhcp_slp_da = <empty>
iface.fragmentation = <empty>
iface.gratuitous_arp = <empty>
iface.incoming_forwarding = <empty>
iface.tos_state = <empty>
iface.tos = 0
iface.ttl = 0
iface.delayed_ack = <empty>
iface.tcp_nagle = <empty>
iface.tcp_wsf_state = <empty>
iface.tcp_wsf = 0
iface.tcp_timer_scale = 0
iface.tcp_timestamp = <empty>
iface.redirect = <empty>
iface.def_task_mgmt_timeout = 0
iface.header_digest = <empty>
iface.data_digest = <empty>
iface.immediate_data = <empty>
iface.initial_r2t = <empty>
iface.data_seq_inorder = <empty>
iface.data_pdu_inorder = <empty>
iface.erl = 0
iface.max_receive_data_len = 0
iface.first_burst_len = 0
iface.max_outstanding_r2t = 0
iface.max_burst_len = 0
iface.chap_auth = <empty>
iface.bidi_chap = <empty>
iface.strict_login_compliance = <empty>
iface.discovery_auth = <empty>
iface.discovery_logout = <empty>
node.discovery_address = 10.11.4.26
node.discovery_port = 3260
node.discovery_type = send_targets
node.session.initial_cmdsn = 0
node.session.initial_login_retry_max = 8
node.session.xmit_thread_priority = -20
node.session.cmds_max = 128
node.session.queue_depth = 32
node.session.nr_sessions = 1
node.session.auth.authmethod = CHAP
node.session.auth.username = bobo
node.session.auth.password = ********
node.session.auth.username_in = <empty>
node.session.auth.password_in = <empty>
node.session.timeo.replacement_timeout = 120
node.session.err_timeo.abort_timeout = 15
node.session.err_timeo.lu_reset_timeout = 30
node.session.err_timeo.tgt_reset_timeout = 30
node.session.err_timeo.host_reset_timeout = 60
node.session.iscsi.FastAbort = Yes
node.session.iscsi.InitialR2T = No
node.session.iscsi.ImmediateData = Yes
node.session.iscsi.FirstBurstLength = 262144
node.session.iscsi.MaxBurstLength = 16776192
node.session.iscsi.DefaultTime2Retain = 0
node.session.iscsi.DefaultTime2Wait = 2
node.session.iscsi.MaxConnections = 1
node.session.iscsi.MaxOutstandingR2T = 1
node.session.iscsi.ERL = 0
node.conn[0].address = 10.11.4.26
node.conn[0].port = 3260
node.conn[0].startup = manual
node.conn[0].tcp.window_size = 524288
node.conn[0].tcp.type_of_service = 0
node.conn[0].timeo.logout_timeout = 15
node.conn[0].timeo.login_timeout = 15
node.conn[0].timeo.auth_timeout = 45
node.conn[0].timeo.noop_out_interval = 5
node.conn[0].timeo.noop_out_timeout = 5
node.conn[0].iscsi.MaxXmitDataSegmentLength = 0
node.conn[0].iscsi.MaxRecvDataSegmentLength = 262144
node.conn[0].iscsi.HeaderDigest = None
node.conn[0].iscsi.IFMarker = No
node.conn[0].iscsi.OFMarker = No
# END RECORD

        4）连接目标。

[root@centos ~]# iscsiadm -m node -T a_test_target@10.11.4.26 -l
Logging in to [iface: default, target: a_test_target@10.11.4.26, portal: 10.11.4.26,3260] (multiple)
Login to [iface: default, target: a_test_target@10.11.4.26, portal: 10.11.4.26,3260] successful.

断开连接：
[root@centos ~]# iscsiadm -m node -T a_test_target@10.11.4.26 -u
Logging out of session [sid: 23, target: a_test_target@10.11.4.26, portal: 10.11.4.26,3260]
Logout of [sid: 23, target: a_test_target@10.11.4.26, portal: 10.11.4.26,3260] successful.

       5）察看磁盘。

fdisk -l