]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
Code Review / openstack-build / cinder-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: b6681fb) | patch
Add chap support to CloudByte cinder driver
authoryogeshprasad <yogesh.prasad@cloudbyte.com>
Fri, 8 May 2015 10:37:22 +0000 (16:07 +0530)
committeryogeshprasad <yogesh.prasad@cloudbyte.com>
Fri, 29 May 2015 05:47:51 +0000 (11:17 +0530)
commited3f36bc94668abfa1a0b07cb8507e091f4bbcea
tree82cd833e7508244575b0076b5e97ea82fbc57362tree | snapshot
parentb6681fb3fb6ad1f82e87be059ba6c605d8728368commit | diff
Add chap support to CloudByte cinder driver

CloudByte iSCSI cinder driver currently does not support
iSCSI CHAP security setting. This opens a security vulnerability
whereby any host machine can mount a CloudByte iSCSI volumes
created via OpenStack.

This patch adds CHAP authentication support for the CloudByte iSCSI
cinder driver.

Admin has to manually add the auth group and chap username/password in
CloudByte storage. Driver uses the first user found in auth group.

DocImpact
Change-Id: I2c4c8320c7471e5cf2e2e242dbe1729c8974bf28
Implements: blueprint add-chap-authentication-support-to-cloudbyte-cinder-driver
cinder/tests/unit/test_cloudbyte.py diff | blob | history
cinder/volume/drivers/cloudbyte/cloudbyte.py diff | blob | history
cinder/volume/drivers/cloudbyte/options.py diff | blob | history