To enable one-way authentication in a new iSCSI Linux implementation, which three modifications should you make in the /etc/iscsi/iscsid.conf file on…

This question asks for the configuration of one-way authentication but requires three answers, which aligns with the configuration for mutual (two-way) CHAP. Assuming the question intended to ask for mutual CHAP, three modifications in /etc/iscsi/iscsid.conf are required.

1. The authentication method must be enabled by setting node.session.auth.authmethod = CHAP.

2. The initiator's credentials (node.session.auth.username, node.session.auth.password) must be set for the target to authenticate the initiator.

3. The target's credentials (node.session.auth.usernamein, node.session.auth.passwordin) must be set for the initiator to authenticate the target.

For strictly one-way authentication, only the CHAP method and the initiator username/password would be configured.

D. sendtargets discovery: This parameter configures authentication specifically for the iSCSI discovery process, not for the subsequent data session, which is the primary context.

E. iSCSI: This is the protocol itself and not a configurable authentication parameter within the iscsid.conf file.

1. NetApp TR-4080: iSCSI Configuration and Implementation Guide for Red Hat Enterprise Linux

Page 15

Section "Configuring CHAP Authentication on the Host". This document details the parameters for both one-way and mutual CHAP. It specifies that for one-way CHAP

node.session.auth.authmethod

node.session.auth.username

and node.session.auth.password are set. For mutual CHAP

node.session.auth.usernamein and node.session.auth.passwordin are also required. This supports the interpretation that options A

B

and C together constitute mutual CHAP.

2. Red Hat Enterprise Linux 8 Documentation

Managing storage devices

Chapter 16. Configuring an iSCSI initiator

Section 16.4. "Configuring CHAP". The documentation explicitly differentiates one-way and mutual CHAP

stating: "To configure one-way CHAP... specify a username and password... To configure mutual CHAP... specify usernamein and passwordin in addition to the one-way CHAP parameters." This confirms that "initiator username/password" (outbound) and "target username/password" (inbound) are distinct settings.

3. iscsid.conf(5) Linux man page. This primary source defines the configuration file's parameters. It clearly defines node.session.auth.username and node.session.auth.password for authenticating the initiator to the target

and node.session.auth.usernamein and node.session.auth.passwordin for authenticating the target to the initiator.