.. _Managing CHAP Accounts for Virtuozzo Infrastructure Platform iSCSI Targets:

Managing CHAP Accounts for Virtuozzo Infrastructure Platform iSCSI Targets
--------------------------------------------------------------------------

Virtuozzo Infrastructure Platform allows you to restrict access to iSCSI targets by means of CHAP authentication.

To make use of CHAP authentication, you need to:

1. Create a CHAP account.

2. Create an iSCSI target bound to this CHAP account.

These actions are described in detail in the following subsections.

.. _Creating CHAP Accounts for Virtuozzo Infrastructure Platform iSCSI Targets:

Creating CHAP Accounts for Virtuozzo Infrastructure Platform iSCSI Targets
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To create a CHAP account, use the ``vstorage-iscsi account-create`` command. For example, to create the CHAP account ``user1``:

::

    # vstorage-iscsi account-create -u user1
    Enter password:
    Verify password:

.. note::The password should be 12 to 16 characters long for Windows clients to be able to establish connection.

.. _Creating Virtuozzo Infrastructure Platform iSCSI Targets Bound to CHAP Accounts:

Creating Virtuozzo Infrastructure Platform iSCSI Targets Bound to CHAP Accounts
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To create a Virtuozzo Infrastructure Platform iSCSI target bound to a CHAP account, use the ``vstorage-iscsi create`` command with the additional ``-u`` option. For example, create a target bound to the CHAP account ``user1``:

::

    # vstorage-iscsi create -n test1 -a 192.168.10.100 -u user1
    IQN: iqn.2014-04.com.vstorage:test1

.. _Changing the CHAP Account Password:

Changing the CHAP Account Password
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To change the password of a CHAP account, use the ``vstorage-iscsi account-set`` command. For example, to change the password of the CHAP account ``user1``:

::

    # vstorage-iscsi account-set -u user1
    Enter password:
    Verify password:

.. note::The password should be 12 to 16 characters long for Windows clients to be able to establish connection.

The new password will become active after target reboot.

.. _Listing CHAP Accounts and Virtuozzo Infrastructure Platform iSCSI Targets Assigned to Them:

Listing CHAP Accounts and Virtuozzo Infrastructure Platform iSCSI Targets Assigned to Them
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

To list existing CHAP accounts, use the ``vstorage-iscsi account-list`` command. For example:

::

    # vstorage-iscsi account-list
    user1

To list Virtuozzo Infrastructure Platform iSCSI targets assigned to a specific CHAP account, use the ``vstorage-iscsi account-list`` command with the ``-u`` option. For example, to list iSCSI targets assigned to the CHAP account ``user1``:

::

    # vstorage-iscsi account-list -u user1
    iqn.2014-04.com.vstorage:test1

