| blob | 2c2f763890f18de98b95eb90acddde21785fe419 |
1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
23 */
25 #include <stdlib.h>
26 #include <stdio.h>
27 #include <wchar.h>
28 #include <widec.h>
29 #include <sys/types.h>
30 #include <sys/socket.h>
31 #include <arpa/inet.h>
32 #include <netdb.h>
33 #include <unistd.h>
34 #include <libintl.h>
35 #include <limits.h>
36 #include <string.h>
37 #include <strings.h>
38 #include <syslog.h>
39 #include <errno.h>
40 #include <netinet/in.h>
41 #include <sys/socket.h>
42 #include <arpa/inet.h>
43 #include <wctype.h>
44 #include <assert.h>
46 #include <ima.h>
47 #include <libsun_ima.h>
48 #include <sys/iscsi_protocol.h>
49 #include <sys/scsi/adapters/iscsi_if.h>
55 #define VERSION_STRING_MAX_LEN 10
56 #define MAX_LONG_CHAR_LEN 19
58 #define MAX_AUTH_METHODS 5
59 /*
60 * Version number:
61 * MAJOR - This should only change when there is an incompatible change made
62 * to the interfaces or the output.
63 *
64 * MINOR - This should change whenever there is a new command or new feature
65 * with no incompatible change.
66 */
84 #define MAX_ISCSI_NAME_LEN 223
85 #define MAX_ADDRESS_LEN 255
86 #define MIN_CHAP_SECRET_LEN 12
87 #define MAX_CHAP_SECRET_LEN 16
88 #define DEFAULT_ISCSI_PORT 3260
89 #define ISNS_DEFAULT_SERVER_PORT 3205
90 #define DEFAULT_RADIUS_PORT 1812
91 #define MAX_CHAP_NAME_LEN 512
96 /* For listNode */
97 #define INF_ERROR 1
98 #define INVALID_NODE_NAME 2
100 #define IMABOOLPRINT(prop, option) \
101 if ((option) == PRINT_CONFIGURED_PARAMS) { \
105 (prop).currentValueValid == IMA_TRUE ? \
106 ((prop).currentValue == IMA_TRUE ? \
108 } else if ((option) == PRINT_NEGOTIATED_PARAMS) { \
110 (prop).currentValueValid == IMA_TRUE ? \
113 }
115 #define IMAMINMAXPRINT(prop, option) \
116 if ((option) == PRINT_CONFIGURED_PARAMS) { \
118 if ((prop).currentValueValid == IMA_TRUE) { \
120 } else if ((prop).currentValueValid == IMA_FALSE) { \
122 } \
123 } else if ((option) == PRINT_NEGOTIATED_PARAMS) { \
124 if ((prop).currentValueValid == IMA_TRUE) { \
126 } else if ((prop).currentValueValid == IMA_FALSE) { \
128 } \
129 }
131 /* forward declarations */
132 #define PARSE_ADDR_OK 0
133 #define PARSE_ADDR_MISSING_CLOSING_BRACKET 1
134 #define PARSE_ADDR_PORT_OUT_OF_RANGE 2
135 #define PARSE_TARGET_OK 0
136 #define PARSE_TARGET_INVALID_TPGT 1
137 #define PARSE_TARGET_INVALID_ADDR 2
139 #define PRINT_CONFIGURED_PARAMS 1
140 #define PRINT_NEGOTIATED_PARAMS 2
143 iSCSINameCheckOK,
144 iSCSINameLenZero,
145 iSCSINameLenExceededMax,
146 iSCSINameUnknownType,
147 iSCSINameInvalidCharacter,
148 iSCSINameIqnFormatError,
149 iSCSINameEUIFormatError,
150 iSCSINameIqnDateFormatError,
151 iSCSINameIqnSubdomainFormatError,
152 iSCSINameIqnInvalidYearError,
153 iSCSINameIqnInvalidMonthError,
154 iSCSINameIqnFQDNError
157 /* Utility functions */
176 /* subcommand functions */
182 /* helper functions */
196 /* LINTED E_STATIC_UNUSED */
209 /* object functions per subcommand */
235 /* LINTED E_STATIC_UNUSED */
240 /* LINTED E_STATIC_UNUSED */
245 /* LINTED E_STATIC_UNUSED */
253 /* globals */
256 /*
257 * Available option letters:
258 *
259 * befgijklmnoquwxyz
260 *
261 * DEFGHIJKLMOQUVWXYZ
262 */
264 /*
265 * Add new options here
266 */
267 optionTbl_t longOptions[] = {
288 };
290 parameterTbl_t loginParams[] = {
304 };
306 parameterTbl_t tunableParams[] = {
311 };
313 /*
314 * Add new subcommands here
315 */
316 subcommand_t subcommands[] = {
322 };
324 /*
325 * Add objects here
326 */
327 object_t objects[] = {
336 };
338 /*
339 * Rules for subcommands and objects
340 */
341 objectRules_t objectRules[] = {
355 };
357 /*
358 * list of objects, subcommands, valid short options, required flag and
359 * exclusive option string
360 *
361 * If it's not here, there are no options for that object.
362 */
363 optionRules_t optionRules[] = {
372 };
375 static boolean_t
377 {
383 }
387 }
389 /*
390 * Convert names to lower case and compare
391 */
398 }
399 }
402 }
404 static boolean_t
406 {
407 #define IPV4_ADDR_BYTES 4
408 #define IPV6_ADDR_BYTES 16
415 }
420 }
425 }
428 }
430 static int
432 {
441 }
442 }
444 }
446 static int
448 {
457 }
458 }
460 }
462 static void
464 {
468 errorString =
487 errorString =
491 errorString =
502 }
504 }
506 /*
507 * input:
508 * execFullName - exec name of program (argv[0])
509 *
510 * Returns:
511 * command name portion of execFullName
512 */
515 {
518 /* guard against '/' at end of command invocation */
529 }
531 }
532 }
534 }
537 /*
538 * input:
539 * nodeProps - pointer to caller allocated IMA_NODE_PROPERTIES
540 *
541 * returns:
542 * zero on success
543 * non-zero otherwise
544 */
545 static int
547 {
548 IMA_OID sharedNodeOid;
554 }
560 }
563 }
565 /*
566 * sunInitiatorFind
567 * Purpose:
568 * Finds the Sun iSCSI initiator (LHBA). This CLI currently supports only
569 * one initiator.
570 *
571 * output:
572 * oid of initiator
573 *
574 * Returns:
575 * zero on success with initiator found
576 * > 0 on success with no initiator found
577 * < 0 on failure
578 */
579 static int
581 {
588 }
595 }
601 }
603 /*
604 * input:
605 * wcInput - wide character string containing discovery address
606 * output:
607 * address - IMA_TARGET_ADDRESS structure containing valid
608 * discovery address
609 * returns:
610 * zero on success
611 * non-zero on failure
612 */
614 static int
616 {
627 /* Check if this is a ipv6 address */
635 }
640 /* set start position to beginning of input object */
645 }
646 /* wcschr for ':'. If not there, use default port */
656 }
659 }
663 /* inet_pton returns 1 on success */
668 }
674 colPos++;
680 }
682 /*
683 * convert port string to unsigned value
684 * Note: Don't remove errno = 0 as you may get false failures.
685 */
693 }
694 /* make sure it's in the range */
700 }
701 }
705 }
707 /*
708 * Print results of send targets command
709 */
710 static void
712 {
725 }
733 }
734 }
737 /*
738 * Print all login parameters
739 */
740 static int
742 {
743 IMA_STATUS status;
744 IMA_BOOL_VALUE propBool;
745 IMA_MIN_MAX_VALUE propMinMax;
755 prefix,
760 prefix,
769 }
778 }
784 }
789 }
799 }
804 }
814 }
819 }
829 }
834 }
844 }
849 }
860 }
865 }
875 }
880 }
889 }
894 }
904 }
909 }
918 }
923 }
934 }
939 }
949 }
954 }
960 }
962 /*
963 * Print discovery information.
964 */
965 static void
967 {
973 IMA_TARGET_DISCOVERY_METHOD_STATIC) ^
974 IMA_TARGET_DISCOVERY_METHOD_STATIC)) {
976 }
978 IMA_TARGET_DISCOVERY_METHOD_SENDTARGETS) ^
979 IMA_TARGET_DISCOVERY_METHOD_SENDTARGETS)) {
981 }
983 IMA_TARGET_DISCOVERY_METHOD_ISNS) ^
984 IMA_TARGET_DISCOVERY_METHOD_ISNS)) {
986 }
988 }
989 }
991 /*
992 * printConnectionList - Prints the conection list provided
993 */
994 static void
996 {
997 IMA_STATUS imaStatus;
1011 }
1021 INET_ADDRSTRLEN)) {
1024 prefix,
1028 }
1033 INET6_ADDRSTRLEN)) {
1036 prefix,
1040 }
1041 }
1046 INET_ADDRSTRLEN)) {
1049 prefix,
1053 }
1058 INET6_ADDRSTRLEN)) {
1061 prefix,
1065 }
1066 }
1069 }
1070 }
1072 /*
1073 * Set login parameters on a target or initiator
1074 */
1075 static int
1077 {
1079 IMA_UINT uintValue;
1080 IMA_BOOL boolValue;
1082 IMA_MIN_MAX_VALUE propMinMax;
1085 /*
1086 * for clarity, there are two switch statements
1087 * The first loads the variable and the second
1088 * calls the appropriate API
1089 */
1095 /* implement 'default'? */
1102 cmdName,
1104 optarg);
1106 }
1114 cmdName,
1116 optarg);
1118 }
1121 cmdName,
1124 }
1130 /* implement 'default'? */
1134 cmdName,
1136 optarg);
1138 }
1141 cmdName,
1144 }
1151 cmdName,
1153 optarg);
1155 }
1158 cmdName,
1161 }
1171 cmdName,
1173 optarg);
1175 }
1182 cmdName,
1184 optarg);
1186 }
1189 cmdName,
1192 }
1199 cmdName,
1201 optarg);
1203 }
1206 cmdName,
1209 }
1215 }
1233 /*
1234 * If this call fails check to see if it's because
1235 * the requested value is > than maxBurstLength
1236 */
1243 }
1248 "be less than or equal to than " \
1250 }
1252 }
1263 /*
1264 * If this call fails check to see if it's because
1265 * the requested value is < than firstBurstLength
1266 */
1273 }
1276 cmdName,
1278 "greater than or equal to " \
1280 }
1282 }
1290 uintValue);
1306 }
1310 }
1312 }
1314 static void
1317 {
1324 }
1338 }
1339 }
1346 }
1361 }
1362 }
1365 }
1372 i++) {
1375 }
1390 }
1391 }
1394 }
1396 }
1397 }
1399 static int
1401 {
1414 }
1416 }
1420 /*
1421 * Retrieve all login params from option argument
1422 * Syntax <key=value,...>
1423 */
1427 }
1436 }
1438 }
1445 }
1447 }
1452 }
1454 }
1459 }
1460 }
1465 }
1467 }
1469 /*
1470 * Print logical unit information for a specific target
1471 */
1472 static void
1474 {
1476 IMA_STATUS status;
1477 SUN_IMA_LU_PROPERTIES lunProps;
1485 }
1493 /*
1494 * The lun is valid though the os Device Name is not.
1495 * Give this information to users for judgement.
1496 */
1505 }
1506 }
1507 }
1509 /*
1510 * Retrieve CHAP secret from input
1511 */
1512 static int
1514 {
1517 /* get password */
1525 }
1530 maxSecretLen);
1533 }
1538 minSecretLen);
1541 }
1552 }
1559 }
1562 }
1564 /*
1565 * Lists the discovery attributes
1566 */
1567 static int
1569 {
1570 IMA_OID initiatorOid;
1571 IMA_DISCOVERY_PROPERTIES discProps;
1573 IMA_STATUS status;
1578 /* Find Sun initiator */
1583 }
1587 }
1589 /* Get discovery attributes from IMA */
1595 }
1610 }
1612 /*
1613 * Print all initiator node attributes
1614 */
1615 static int
1617 {
1618 IMA_OID initiatorOid;
1619 IMA_NODE_PROPERTIES nodeProps;
1620 IMA_STATUS status;
1624 SUN_IMA_RADIUS_CONFIG radiusConfig;
1625 SUN_IMA_DIGEST_ALGORITHM_VALUE digestAlgorithms;
1626 IMA_BOOL radiusAccess;
1635 }
1639 }
1641 /* Find Sun initiator */
1646 }
1650 }
1651 /* Begin output */
1660 }
1664 /* Get Digest configuration */
1669 PRINT_CONFIGURED_PARAMS);
1674 }
1680 PRINT_CONFIGURED_PARAMS);
1685 }
1687 /* Get authentication type for this lhba */
1692 /* No authentication method set - default is NONE */
1698 }
1711 }
1712 }
1713 }
1717 /* Get RADIUS configuration */
1727 }
1730 }
1741 }
1746 }
1749 /* print tunable parameters information. */
1752 /* print configured session information. */
1756 }
1758 /*
1759 * Print discovery addresses
1760 */
1761 static int
1764 {
1765 IMA_OID initiatorOid;
1767 IMA_DISCOVERY_ADDRESS_PROPERTIES discAddrProps;
1768 IMA_TARGET_ADDRESS address;
1770 IMA_STATUS status;
1775 boolean_t found;
1783 /* Find Sun initiator */
1788 }
1792 }
1804 }
1805 }
1807 /*
1808 * If there are multiple objects, execute outer 'for' loop that
1809 * many times for each target detail, otherwise, execute it only
1810 * once with summaries only
1811 */
1818 }
1826 }
1830 /* initialize */
1837 cmdName,
1841 }
1843 /*
1844 * if one or more objects were input,
1845 * get the values
1846 */
1851 }
1852 }
1855 j++) {
1856 discAddrProps =
1859 /*
1860 * Compare the discovery address with the input if
1861 * one was input
1862 */
1868 }
1871 /* Print summary - always */
1874 ipv4Address) {
1885 discAddrProps.
1893 }
1894 }
1897 IMA_NODE_PROPERTIES nodeProps;
1901 }
1903 /*
1904 * Issue sendTargets only when an addr is
1905 * specified.
1906 */
1915 }
1917 }
1920 /* we found the discovery address - break */
1922 }
1923 }
1924 /*
1925 * There was an object entered but we didn't
1926 * find it.
1927 */
1931 }
1932 }
1934 }
1936 /*
1937 * Print ISNS Server addresses
1938 */
1939 static int
1942 {
1943 IMA_OID initiatorOid;
1945 IMA_DISCOVERY_ADDRESS_PROPERTIES discAddrProps;
1946 IMA_TARGET_ADDRESS address;
1948 IMA_STATUS status;
1953 boolean_t found;
1961 /* Find Sun initiator */
1966 }
1970 }
1982 }
1983 }
1985 /*
1986 * If there are multiple objects, execute outer 'for' loop that
1987 * many times for each target detail, otherwise, execute it only
1988 * once with summaries only
1989 */
1996 }
2004 }
2008 /* initialize */
2015 cmdName,
2019 }
2021 /*
2022 * if one or more objects were input,
2023 * get the values
2024 */
2029 }
2030 }
2033 j++) {
2034 discAddrProps =
2037 /*
2038 * Compare the discovery address with the input if
2039 * one was input
2040 */
2043 address) &&
2047 }
2050 /* Print summary - always */
2053 ipv4Address) {
2060 discAddrProps.
2064 }
2067 sAddr,
2069 }
2072 IMA_NODE_PROPERTIES nodeProps;
2076 }
2078 /*
2079 * Issue sendTargets only when an addr is
2080 * specified.
2081 */
2086 /*
2087 * Check if the discovery mode is
2088 * disabled.
2089 */
2091 IMA_ERROR_OBJECT_NOT_FOUND) {
2094 "discovery "\
2095 "mode "\
2096 "disabled. "\
2097 "No targets "\
2103 "to get "\
2105 }
2107 }
2109 }
2112 /* we found the discovery address - break */
2114 }
2115 }
2116 /*
2117 * There was an object entered but we didn't
2118 * find it.
2119 */
2123 }
2124 }
2126 }
2128 /*
2129 * Print static configuration targets
2130 */
2131 static int
2133 {
2134 IMA_STATUS status;
2135 IMA_OID initiatorOid;
2137 SUN_IMA_STATIC_TARGET_PROPERTIES staticTargetProps;
2149 boolean_t isIpv6;
2158 /* Find Sun initiator */
2163 }
2167 }
2169 /*
2170 * If there are multiple objects, execute outer 'for' loop that
2171 * many times for each static config detail, otherwise, execute it only
2172 * once with summaries only
2173 */
2180 }
2182 /* convert ':' to wide char for wchar string search */
2187 }
2195 }
2204 SUN_IMA_IP_ADDRESS_PORT_LEN,
2211 }
2212 }
2215 j++) {
2217 IMA_UINT16 stpgt;
2218 IMA_BOOL defaultTpgt;
2231 }
2234 tpgt;
2241 ipv4Address;
2243 /*
2244 * Compare the static target name with the input if
2245 * one was input
2246 */
2252 /* targetName found - found = B_TRUE */
2263 staticTargetProps.
2270 staticTargetProps.
2275 }
2278 SUN_IMA_IP_ADDRESS_PORT_LEN) ==
2281 cmdName,
2285 }
2288 staticTargetAddress,
2289 SUN_IMA_IP_ADDRESS_PORT_LEN)
2291 staticTargetProps.
2294 /*
2295 * Since an object is
2296 * specified, it should also
2297 * have a tpgt specified. If
2298 * not, that means the object
2299 * specified is associated with
2300 * the default tpgt. In
2301 * either case, a tpgt
2302 * comparison should be done
2303 * before claiming that a
2304 * match is found.
2305 */
2313 }
2314 }
2316 }
2317 }
2320 /* print summary - always */
2327 staticTargetProps.
2333 sAddr,
2338 staticTargetProps.
2344 sAddr,
2347 }
2350 targetAddress.
2353 staticTargetProps.
2357 }
2358 }
2360 }
2361 /*
2362 * No details to display, but if there were:
2363 * if (object && found)...
2364 *
2365 */
2367 /*
2368 * There was an object entered but we didn't
2369 * find it.
2370 */
2375 }
2376 }
2378 }
2380 /*
2381 * Print targets
2382 */
2383 /*ARGSUSED*/
2384 static int
2386 {
2387 IMA_OID initiatorOid;
2390 SUN_IMA_TARGET_PROPERTIES targetProps;
2391 IMA_STATUS status;
2399 boolean_t found;
2413 /* Find Sun initiator */
2418 }
2422 }
2437 }
2438 }
2440 /*
2441 * If there are multiple objects, execute outer 'for' loop that
2442 * many times for each target detail, otherwise, execute it only
2443 * once with summaries only
2444 */
2451 }
2458 }
2469 SUN_IMA_IP_ADDRESS_PORT_LEN,
2476 }
2477 }
2487 }
2489 /*
2490 * Compare the target name with the input if
2491 * one was input, if they match, print the target's info
2492 *
2493 * if no target name was input, continue printing this
2494 * target
2495 */
2501 defaultTpgtConf ==
2502 IMA_FALSE &&
2503 targetProps.
2507 /*
2508 * tpgt does not match,
2509 * move on to next
2510 * target
2511 */
2513 }
2516 }
2518 /*
2519 * target name does not match, move on
2520 * to next target
2521 */
2523 }
2524 }
2526 /* print summary - always */
2530 /* Alias */
2537 }
2547 }
2566 }
2574 SUN_IMA_DIGEST_ALGORITHM_VALUE digestAlgorithms;
2583 PRINT_NEGOTIATED_PARAMS);
2585 /* Get Digest configuration */
2590 ISCSI_LOGIN_PARAM_HEADER_DIGEST,
2598 PRINT_NEGOTIATED_PARAMS);
2605 }
2608 ISCSI_LOGIN_PARAM_DATA_DIGEST,
2616 PRINT_NEGOTIATED_PARAMS);
2623 }
2626 }
2632 /*
2633 * Proceeds the listing
2634 * but indicates the
2635 * error in return value
2636 */
2638 }
2648 }
2651 }
2654 }
2655 }
2656 /*
2657 * did we find the object
2658 */
2663 }
2664 }
2668 }
2671 /*
2672 * Print configured session information
2673 */
2674 static int
2676 {
2677 IMA_STATUS status;
2683 /* Get configured session information */
2690 /* default binding */
2693 /* hardcoded binding */
2701 MAX_ADDRESS_LEN);
2706 MAX_ADDRESS_LEN);
2707 }
2710 }
2711 }
2713 }
2718 }
2722 }
2724 /*
2725 * Print target parameters
2726 */
2727 static int
2730 {
2731 IMA_STATUS status;
2732 IMA_OID initiatorOid;
2735 SUN_IMA_TARGET_PROPERTIES targetProps;
2737 IMA_BOOL bidirAuth;
2747 boolean_t found;
2749 SUN_IMA_DIGEST_ALGORITHM_VALUE digestAlgorithms;
2757 /* Find Sun initiator */
2762 }
2766 }
2778 }
2779 }
2781 /*
2782 * If there are multiple operands, execute outer 'for' loop that
2783 * many times to find each target parameter operand entered, otherwise,
2784 * execute it only once for all target parameters returned.
2785 */
2792 }
2794 /*
2795 * Ideally there should be an interface available for obtaining
2796 * the list of target-param objects. Since the driver currently
2797 * creates a target OID and the associated session structure when
2798 * a target-param object is created, we can leverage the target
2799 * OID list and use it to manage the target-param objects. When
2800 * we stop creating a session for target-param object in the
2801 * driver, we will switch to using a different interface to
2802 * obtain target-param objects.
2803 */
2809 }
2818 SUN_IMA_IP_ADDRESS_PORT_LEN,
2825 }
2826 }
2838 }
2840 /*
2841 * Compare the target name with the input if
2842 * one was input
2843 */
2847 /*
2848 * For now, regardless of whether a target
2849 * address is specified, we return B_TRUE
2850 * because IMA_TARGET_PROPERTIES does not
2851 * have a field for specifying address.
2852 */
2854 }
2856 /*
2857 * if no operand was entered OR
2858 * an operand was entered and it was
2859 * found, we want to print
2860 */
2863 }
2879 }
2880 }
2883 /* Get bidirectional authentication flag */
2896 }
2900 }
2903 /* Get authentication type for this target */
2905 initiatorOid,
2912 /*
2913 * No authentication method define
2914 * NONE by default.
2915 */
2922 }
2933 targetList->
2940 "unknown "
2943 }
2944 }
2945 }
2949 PRINT_CONFIGURED_PARAMS)
2954 }
2956 /* Get Digest configuration */
2964 PRINT_CONFIGURED_PARAMS);
2969 }
2978 PRINT_CONFIGURED_PARAMS);
2983 }
2985 /* print tunable parameters infomation */
2990 }
2992 /* print configured session information */
2997 }
3000 }
3004 }
3005 }
3010 }
3011 }
3015 }
3017 /*
3018 * Modify discovery attributes
3019 */
3020 static int
3022 {
3023 IMA_OID oid;
3024 IMA_STATUS status;
3025 IMA_BOOL setDiscovery;
3026 IMA_HOST_ID hostId;
3033 /* Find Sun initiator */
3038 }
3042 }
3045 /* check optarg and set bool accordingly */
3055 }
3059 /* Set static discovery */
3061 setDiscovery);
3066 }
3069 /* Set send targets discovery */
3071 setDiscovery);
3076 }
3079 /* Set iSNS discovery */
3087 }
3094 }
3095 }
3098 }
3100 /*
3101 * Set the initiator node's authentication method
3102 */
3103 static int
3105 {
3106 IMA_INITIATOR_AUTHPARMS authParams;
3107 IMA_STATUS status;
3116 /*
3117 * Start with existing parameters and modify with the desired change
3118 * before passing along. We ignore any failures as they probably
3119 * are caused by non-existence of auth params for the given node.
3120 */
3129 }
3134 }
3138 }
3152 }
3164 }
3171 }
3173 }
3175 /*
3176 * Set the target's authentication method
3177 */
3178 static int
3180 {
3181 IMA_INITIATOR_AUTHPARMS authParams;
3182 IMA_STATUS status;
3191 /*
3192 * Start with existing parameters and modify with the desired change
3193 * before passing along. We ignore any get failures as they probably
3194 * are caused by non-existence of auth params for the given target.
3195 */
3204 }
3209 }
3213 }
3227 }
3239 }
3246 }
3248 }
3250 static int
3252 {
3253 IMA_BOOL boolValue;
3254 IMA_STATUS status;
3266 }
3272 }
3274 }
3276 static int
3278 {
3280 IMA_STATUS status;
3291 /*
3292 * Strip the first int value from the string. If we sprintf
3293 * this back to a string and it matches the original string
3294 * then this command is using default binding. If not a
3295 * match we have hard coded binding or a usage error.
3296 */
3300 /* default binding */
3302 /* allocate the required pConfigSessions */
3307 }
3309 /* setup pConfigSessions */
3314 /* hardcoded binding */
3316 /*
3317 * First we need to determine how many bindings
3318 * are available. This can be done by scanning
3319 * for the number of ',' + 1.
3320 */
3324 sessions++;
3326 }
3328 /* allocate the required pConfigSessions */
3334 }
3336 /* setup pConfigSessions */
3341 /* Now fill in the binding information. */
3344 /*
3345 * Walk thru possible address strings
3346 * stop once all strings are processed.
3347 */
3349 /*
3350 * Check if there is another address after this
3351 * one. If so terminate the current address and
3352 * keep a pointer to the next one.
3353 */
3357 }
3359 /*
3360 * Parse current address. If invalid abort
3361 * processing of addresses and free memory.
3362 */
3368 }
3370 /* Convert address into binary form */
3379 ipv4Address =
3380 IMA_FALSE;
3384 }
3386 /* inet_pton found address invalid */
3390 }
3392 /* update addressPos to next address */
3393 sessions++;
3395 }
3396 }
3398 /* issue SUN_IMA request */
3400 pConfigSessions);
3405 }
3409 }
3411 static int
3413 {
3417 }
3422 }
3425 }
3428 /*
3429 * Set the authentication method
3430 * Currently only supports CHAP and NONE
3431 */
3432 static int
3434 {
3437 IMA_STATUS status;
3438 IMA_AUTHMETHOD value;
3444 /*
3445 * optarg will be a , delimited set of auth methods, in order
3446 * of preference
3447 * if any values here are incorrect, return without setting
3448 * anything.
3449 */
3460 }
3462 commaPos++;
3465 }
3466 /* Should not find more method specified - if found, error */
3471 }
3476 }
3483 }
3485 }
3487 static int
3489 {
3492 IMA_STATUS status;
3493 IMA_AUTHMETHOD value;
3499 /*
3500 * optarg will be a , delimited set of auth methods, in order
3501 * of preference
3502 * if any values here are incorrect, return without setting
3503 * anything.
3504 */
3515 }
3517 commaPos++;
3520 }
3521 /* Should not find more method specified - if found, error */
3526 }
3531 }
3539 }
3541 }
3543 /*
3544 * Modify the RADIUS configuration of the initiator node.
3545 *
3546 * Return 0 on success.
3547 */
3548 static int
3550 {
3551 SUN_IMA_RADIUS_CONFIG config;
3552 IMA_STATUS status;
3562 PARSE_ADDR_OK) {
3564 }
3567 /* Not setting shared secret here. */
3574 }
3577 }
3579 /*
3580 * Modify the RADIUS access flag of the initiator node.
3581 *
3582 * Return 0 on success.
3583 */
3584 static int
3586 {
3587 IMA_BOOL radiusAccess;
3588 IMA_OID initiatorOid;
3589 IMA_STATUS status;
3590 SUN_IMA_RADIUS_CONFIG radiusConfig;
3595 /* Check if Radius Config is there */
3601 }
3609 }
3611 /* Check if Radius Shared is set */
3616 }
3624 cmdName,
3626 optarg);
3628 }
3633 }
3636 }
3638 /*
3639 * Modify the RADIUS shared secret.
3640 *
3641 * Returns:
3642 * zero on success.
3643 * > 0 on failure.
3644 */
3645 static int
3647 {
3649 IMA_OID initiatorOid;
3650 IMA_STATUS status;
3651 SUN_IMA_RADIUS_CONFIG radiusConfig;
3661 }
3667 }
3670 }
3671 /* First obtain existing RADIUS configuration (if any) */
3678 }
3680 /* Modify the shared secret only */
3689 }
3692 }
3694 /*
3695 * Set initiator node attributes.
3696 */
3697 static int
3699 {
3700 IMA_NODE_NAME nodeName;
3701 IMA_NODE_ALIAS nodeAlias;
3702 IMA_OID oid;
3703 IMA_STATUS status;
3706 iSCSINameCheckStatusType nameCheckStatus;
3707 IMA_OID sharedNodeOid;
3717 /* Get boot session's info */
3727 }
3728 }
3730 /* Find Sun initiator */
3736 }
3742 MAX_ISCSI_NAME_LEN) {
3744 cmdName,
3747 MAX_ISCSI_NAME_LEN);
3748 }
3750 /* Take the first operand as node name. */
3756 cmdName,
3759 }
3765 }
3770 cmdName,
3774 }
3777 /*
3778 * For iqn format, we should map
3779 * the upper-case characters to
3780 * their lower-case equivalents.
3781 */
3783 lowerCase =
3786 }
3787 }
3790 /* Perform string profile checks */
3791 nameCheckStatus =
3797 }
3799 /*
3800 * IMA_GetSharedNodeOid(&sharedNodeOid);
3801 * if (!IMA_SUCCESS(status)) {
3802 * printLibError(status);
3803 * return (INF_ERROR);
3804 * }
3805 */
3809 " allowed to change"
3812 }
3819 }
3826 " allowed to change"
3829 }
3830 /* Take the first operand as node alias. */
3832 MAX_ISCSI_NAME_LEN) {
3834 cmdName,
3837 MAX_ISCSI_NAME_LEN);
3838 }
3845 cmdName,
3848 }
3855 }
3858 nodeAlias);
3863 }
3870 " allowed to change authentication"
3873 }
3877 }
3884 }
3891 }
3898 }
3907 }
3911 }
3920 " boot and MPxIO"
3921 " is disabled, not allowed"
3922 " to change number of"
3923 " sessions to be"
3926 }
3927 }
3934 " fail to set configured"
3936 }
3938 }
3948 }
3952 }
3962 " boot and MPxIO"
3963 " is disabled, not"
3964 " allowed to"
3965 " change initiator's"
3968 }
3969 }
3973 }
3982 " boot and MPxIO"
3983 " is disabled, not"
3984 " allowed to"
3985 " change initiator's"
3988 }
3989 }
3993 }
4000 }
4007 }
4008 }
4011 }
4013 /*
4014 * Modify target parameters
4015 */
4016 static int
4018 {
4019 IMA_OID oid;
4020 IMA_OID targetOid;
4021 IMA_STATUS status;
4023 SUN_IMA_TARGET_PROPERTIES targetProps;
4027 boolean_t found;
4032 iSCSINameCheckStatusType nameCheckStatus;
4036 IMA_NODE_NAME bootTargetName;
4037 IMA_INITIATOR_AUTHPARMS bootTargetCHAP;
4038 IMA_BOOL iscsiBoot;
4039 IMA_BOOL mpxioEnabled;
4045 /* Find Sun initiator */
4050 }
4054 }
4061 SUN_IMA_IP_ADDRESS_PORT_LEN,
4067 }
4069 /* Perform string profile checks */
4074 }
4081 }
4092 }
4100 }
4108 }
4109 }
4111 /* find target oid */
4120 }
4122 /*
4123 * Compare the target name with the input name
4124 */
4127 /*
4128 * For now, regardless of whether a target address
4129 * is specified, we return B_TRUE because
4130 * IMA_TARGET_PROPERTIES does not have a field for
4131 * specifying address.
4132 */
4138 /*
4139 * iscsi booting, need changed target param is
4140 * booting target, for auth param, not allow
4141 * to change, for others dependent on mpxio
4142 */
4148 /*
4149 * -C CHAP secret set
4150 * -H CHAP name set
4151 * -a authentication
4152 * -B bi-directional-authentication
4153 */
4156 " not allowed to modify"
4157 " authentication parameters"
4160 }
4164 " MPxIO is disabled, not allowed"
4165 " to modify boot target's"
4168 }
4170 }
4175 }
4177 /*
4178 * Even after finding a matched target, keep going
4179 * since there could be multiple target objects
4180 * associated with one target name in the system
4181 * because of different TPGTs.
4182 */
4183 }
4184 }
4186 /* If the target OID cannot be found create one */
4194 }
4198 }
4199 }
4203 }
4205 /*
4206 * Add one or more addresses
4207 */
4208 static int
4210 {
4211 IMA_STATUS status;
4213 SUN_IMA_TARGET_ADDRESS address;
4220 /* Find Sun initiator */
4225 }
4229 }
4231 /*
4232 * Format of discovery address operand:
4233 *
4234 * <IP address|hostname>:<port>
4235 */
4237 /* initialize */
4247 }
4252 }
4260 }
4267 }
4268 }
4269 }
4271 }
4273 /*
4274 * Add one or more static configuration targets
4275 */
4276 static int
4278 {
4285 IMA_STATUS status;
4286 IMA_OID oid;
4287 SUN_IMA_STATIC_DISCOVERY_TARGET staticConfig;
4292 iSCSINameCheckStatusType nameCheckStatus;
4297 /* Find Sun initiator */
4302 }
4306 }
4308 /*
4309 * Format of static config operand:
4310 * <target-name>,<IP address|hostname>[:port][,tpgt]
4311 */
4318 SUN_IMA_IP_ADDRESS_PORT_LEN,
4325 }
4332 }
4333 /* Perform string profile checks */
4339 }
4353 }
4361 }
4370 }
4377 }
4378 }
4382 }
4385 }
4387 /*
4388 * Remove one or more addresses
4389 */
4390 static int
4392 {
4393 IMA_STATUS status;
4394 IMA_OID initiatorOid;
4395 SUN_IMA_TARGET_ADDRESS address;
4402 /* Find Sun initiator */
4407 }
4411 }
4414 /* initialize */
4424 }
4430 }
4440 }
4442 }
4448 }
4449 }
4450 }
4452 }
4454 /*
4455 * Remove one or more static configuration targets
4456 */
4457 static int
4459 {
4460 IMA_STATUS status;
4461 IMA_OID initiatorOid;
4463 SUN_IMA_STATIC_TARGET_PROPERTIES staticTargetProps;
4467 boolean_t atLeastFoundOne;
4468 boolean_t matched;
4475 iSCSINameCheckStatusType nameCheckStatus;
4481 /* Find Sun initiator */
4486 }
4490 }
4498 }
4506 SUN_IMA_IP_ADDRESS_PORT_LEN,
4513 }
4515 /* Perform string profile checks */
4520 }
4524 j++) {
4525 IMA_UINT16 stpgt;
4532 /*
4533 * When removing multiple static-config
4534 * entries we need to expect get
4535 * failures. These failures occur when
4536 * we are trying to get entry
4537 * information we have just removed.
4538 * Ignore the failure and continue.
4539 */
4547 }
4548 }
4550 stpgt =
4553 /*
4554 * Compare the static target name with the input if
4555 * one was input
4556 */
4566 hostnameIpAddress.
4568 IMA_TRUE) {
4570 staticTargetProps.
4574 tmpStr,
4578 staticTargetProps.
4582 tmpStr,
4584 }
4587 SUN_IMA_IP_ADDRESS_PORT_LEN) ==
4595 }
4598 staticTargetAddress,
4599 SUN_IMA_IP_ADDRESS_PORT_LEN) ==
4607 matched =
4608 B_TRUE;
4609 }
4610 }
4611 }
4612 }
4615 status =
4622 }
4624 }
4625 }
4626 }
4631 }
4632 }
4634 }
4636 /*
4637 * Remove one or more target params.
4638 */
4639 static int
4641 {
4643 IMA_STATUS status;
4644 IMA_OID initiatorOid;
4646 SUN_IMA_TARGET_PROPERTIES targetProps;
4649 boolean_t found;
4651 IMA_NODE_NAME bootTargetName;
4655 /* Get boot session's info */
4665 }
4673 }
4674 }
4678 /* Find Sun initiator */
4683 }
4687 }
4694 }
4697 /* initialize */
4700 /* Ignore IP address. */
4702 }
4710 }
4713 j++) {
4721 }
4723 /*
4724 * Compare the target name with the input if
4725 * one was input
4726 */
4733 /*
4734 * iscsi booting, need changed target
4735 * param is booting target, booting
4736 * session mpxio disabled, not
4737 * allow to update
4738 */
4743 " with MPxIO disabled,"
4744 " not allowed to remove"
4748 }
4750 }
4759 }
4760 }
4761 }
4763 /* Silently ignoring it? */
4766 }
4767 }
4771 }
4773 /*ARGSUSED*/
4774 static int
4777 {
4795 }
4797 }
4799 /*ARGSUSED*/
4800 static int
4803 {
4814 funcRet);
4818 funcRet);
4837 }
4839 }
4841 /*ARGSUSED*/
4842 static int
4845 {
4867 }
4868 i++;
4869 }
4877 }
4879 }
4881 /*ARGSUSED*/
4882 static int
4885 {
4892 funcRet);
4905 }
4907 }
4909 static void
4911 {
4927 cmdName,
4960 }
4961 }
4963 /*
4964 * A convenient function to modify the target parameters of an individual
4965 * target.
4966 *
4967 * Return 0 if successful
4968 * Return 1 if failed
4969 */
4970 static int
4973 {
4982 }
4988 }
4994 }
5000 }
5006 }
5009 /* Login parameter */
5013 }
5016 /* Modify configure sessions */
5020 }
5026 }
5032 }
5034 }
5035 }
5038 }
5040 /*
5041 * This helper function could go into a utility module for general use.
5042 */
5043 static int
5050 {
5056 /* IPv6 address */
5063 }
5067 address_str_len);
5069 /* Extract the port number */
5070 close_bracket_pos++;
5072 close_bracket_pos++;
5079 close_bracket_pos,
5082 }
5085 /* Port number out of range */
5088 tmp_port);
5092 }
5095 }
5098 }
5102 /* IPv4 address */
5106 /* No port number specified. */
5109 address_str_len);
5113 address_str_len);
5115 /* Extract the port number */
5116 colon_pos++;
5126 }
5129 /* Port number out of range */
5132 tmp_port);
5136 }
5139 }
5140 }
5143 }
5146 }
5148 /*
5149 * This helper function could go into a utility module for general use.
5150 */
5151 iSCSINameCheckStatusType
5153 {
5164 }
5166 /*
5167 * check for invalid characters
5168 * According to RFC 3722 iSCSI name must be either a letter,
5169 * a digit or one of the following '-' '.' ':'
5170 */
5177 }
5178 }
5182 /*
5183 * If name is of type iqn, check date string and naming
5184 * authority.
5185 */
5188 /*
5189 * Don't allow the string to end with a colon. If there is a
5190 * colon then there must be a subdomain provided.
5191 */
5194 }
5196 /* Date string */
5202 /* Date string should be in YYYY-MM format */
5206 }
5208 /*
5209 * Validate year. Only validating that the
5210 * year can be converted to a number. No
5211 * validation will be done on year's actual
5212 * value.
5213 */
5222 }
5224 /*
5225 * Validate month is valid.
5226 */
5235 }
5237 /*
5238 * A reversed FQDN needs to be provided. We
5239 * will only check for a "." followed by more
5240 * than two or more characters. The list of domains is
5241 * too large and changes too frequently to
5242 * add validation for.
5243 */
5247 }
5249 /* Name authority string */
5255 }
5258 }
5261 /* If name is of type EUI, change its length */
5265 }
5271 }
5273 }
5278 }
5279 }
5281 /*
5282 * This helper function could go into a utility module for general use.
5283 *
5284 * Returns:
5285 * B_TRUE is the numberStr is an unsigned natural number and within the
5286 * specified bound.
5287 * B_FALSE otherwise.
5288 */
5289 boolean_t
5291 {
5297 }
5302 }
5303 }
5307 }
5310 }
5312 /*
5313 * This helper function could go into a utility module for general use.
5314 * It parses a target string in the format of:
5315 *
5316 * <target_name>,[<ip_address>[:port][,tpgt]]
5317 *
5318 * and creates wchar strings for target name and target address. It
5319 * also populates port and tpgt if found.
5320 *
5321 * Returns:
5322 * PARSE_TARGET_OK if parsing is successful.
5323 * PARSE_TARGET_INVALID_TPGT if the specified tpgt is
5324 * invalid.
5325 * PARSE_TARGET_INVALID_ADDR if the address specified is
5326 * invalid.
5327 */
5328 int
5339 {
5354 commaPos++;
5357 /*
5358 * Checking of tpgt makes sense only when
5359 * the target address/port are specified.
5360 */
5364 commaPos2++;
5366 B_TRUE) {
5373 }
5374 }
5386 }
5388 targetAddressStrLen);
5392 }
5396 }
5402 }
5405 }
5407 /*ARGSUSED*/
5408 static void
5410 {
5411 IMA_INITIATOR_AUTHPARMS authParams;
5412 IMA_STATUS status;
5415 /* Get Chap Name depending upon oid object type */
5422 }
5427 /*
5428 * Default chap name will be the node name. The default will
5429 * be set by the driver.
5430 */
5439 }
5442 }
5443 }
5445 static boolean_t
5447 {
5460 }
5465 " try 'svcadm enable network/iscsi/initiator' to"
5470 }
5473 }
5475 /*
5476 * Prints out see manual page.
5477 * Called out through atexit(3C) so is always last thing displayed.
5478 */
5479 void
5481 {
5491 }
5494 /*
5495 * main calls a parser that checks syntax of the input command against
5496 * various rules tables.
5497 *
5498 * The parser provides usage feedback based upon same tables by calling
5499 * two usage functions, usage and subUsage, handling command and subcommand
5500 * usage respectively.
5501 *
5502 * The parser handles all printing of usage syntactical errors
5503 *
5504 * When syntax is successfully validated, the parser calls the associated
5505 * function using the subcommands table functions.
5506 *
5507 * Syntax is as follows:
5508 * command subcommand [options] resource-type [<object>]
5509 *
5510 * The return value from the function is placed in funcRet
5511 */
5512 int
5514 {
5515 synTables_t synTables;
5524 }
5528 }
5530 /* set global command name */
5542 /* call the CLI parser */
5547 }
5553 }
5555 }
5557 static int
5559 {
5563 IMA_STATUS status;
5564 IMA_UINT uintValue;
5565 ISCSI_TUNABLE_PARAM tunableObj;
5575 }
5577 }
5587 }
5589 }
5596 }
5598 }
5607 cmdName,
5609 optarg);
5613 }
5615 }
5618 cmdName,
5623 }
5625 }
5631 }
5633 }
5637 ISCSI_RX_TIMEOUT_VALUE;
5640 ISCSI_CONN_DEFAULT_LOGIN_MAX;
5643 ISCSI_LOGIN_POLLING_DELAY;
5644 }
5654 }
5656 }
5662 }
5664 }
5669 }
5671 }
5673 /*
5674 * Print tunable parameters information
5675 */
5676 static int
5678 {
5679 ISCSI_TUNABLE_PARAM tunableObj;
5681 IMA_STATUS status;
5691 }
5695 }
5707 }
5711 }
5723 }
5727 }
5733 }
5735 /*
5736 * This is helper function to check conn_login_max and polling_login_delay.
5737 */
5738 static int
5740 {
5742 IMA_STATUS status;
5743 IMA_UINT getValue;
5744 ISCSI_TUNABLE_PARAM getObj;
5753 }
5760 }
5764 ISCSI_DEFAULT_LOGIN_POLLING_DELAY,
5768 ISCSI_DEFAULT_CONN_DEFAULT_LOGIN_MAX,
5770 }
5771 }
5777 cmdName,
5779 valuep);
5781 }
5786 getValue);
5788 }
5793 getValue);
5795 }
5796 }
5798 }