Simpler Navigation for Servers and Operating Systems
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
Operating System - VMware
cancel
Showing results for 
Search instead for 
Did you mean: 

bl685g7, emulex NC551m, esxi 4.1: iscsi chap settings are failing with IMA_VMW_SetMutualAuthParms

JimTonic
Advisor

bl685g7, emulex NC551m, esxi 4.1: iscsi chap settings are failing with IMA_VMW_SetMutualAuthParms

I have a bl685 g7 set up with the latest esxi 4.1 from hp (4.1 U2 from June).

The latest emules drivers are already included with the image:


/sbin # esxupdate query --v | grep be2
cross_oem-vmware-esx-drivers-net-be2net_400.4.1.334.0-1vmw.2.17.249663 installed 2012-05-16T20:41:30.828723+00:00
cross_oem-vmware-esx-drivers-scsi-be2iscsi_400.4.1.334.301-1vmw.0.0.343171 installed 2012-05-16T20:46:37.652539+00:00
cross_oem-vmware-esx-ima-be2iscsi_400.4.1.334.301-1vmw.0.0.343171 installed 2012-05-16T20:50:15.749832+00:00

 
The iscsi hardware hba (emulex NC551m) supports the following 2 authentication methods:

/sbin # vmkiscsi-tool -A -l vmhba3
---------------Inititator Authentication ------------
Supported Authentication Methods for Adapter vmhba3:
IMA_AUTHMETHOD_NONE
IMA_AUTHMETHOD_CHAP


---------------Mutual Authentication ------------
Supported Authentication Methods for Adapter vmhba3:
IMA_AUTHMETHOD_NONE
IMA_AUTHMETHOD_CHAP

 

 
Using vcenter to configure chap settings for the hbas (on any level, hba, server, target) there are 2 settings available:

 

chap.png

 

 

Do not use CHAP" maps nicely to "IMA_AUTHMETHOD_NONE" and this setting works.

 

However using the 2nd option, "Use CHAP unless prohibited by target" fails with the following error:

 

Call "HostStorageSystem.UpdateInternetScsiAuthenticationProperties" for object "storageSystem" on ESXi "10.10.10.1" failed.
Operation failed, diagnostics report: iScsiLibException: status(c0000000): Invalid parameter; Message= IMA_VMW_SetMutualAuthParms

 
So for me it seems like the setting "Use CHAP unless prohibited by target" does not map to the hba supported option "IMA_AUTHMETHOD_CHAP" which IHO should be rather something like "Use CHAP" in the vcenter config dialog?

 

Same experience with esxi 5.*.

 

???

 

Thx
Jim