How to change the Default Policy @ iSCSI ACL.

iSCSI related applications
Post Reply
zito
Starting out
Posts: 16
Joined: Tue May 25, 2010 5:44 pm

How to change the Default Policy @ iSCSI ACL.

Post by zito » Fri Oct 13, 2017 10:26 pm

Is there a posibility to change the Default Policy in iSCSI ACL ?
The default LUN Policy is read and write access from all the connected iSCSI initiators for which LUN masking policy is not specified.

...and after clicking the Default Policy, edited it and applied the changes (on anything else that default allow read/write for all) - finally it's not changed.

Editing the default LUN policy is made after at last one LUN has been created.

Is that normal????
Can I change it?
In which file is the state of Default Policy save (@4.3) ?

QNAP: TVS-871U @ 4.3.3.0299 (b:20170910)

Best Regards
Tomek

User avatar
storageman
Ask me anything
Posts: 5511
Joined: Thu Sep 22, 2011 10:57 pm

Re: How to change the Default Policy @ iSCSI ACL.

Post by storageman » Mon Oct 16, 2017 4:30 pm

It's not obvious and badly designed, ISCSI ACL and click on read/write/deny status to change. You'll see them change from Yes/No.

Don't mess with files use the GUI or you'll get in mess.

zito
Starting out
Posts: 16
Joined: Tue May 25, 2010 5:44 pm

Re: How to change the Default Policy @ iSCSI ACL.

Post by zito » Mon Oct 16, 2017 4:54 pm

Yes, it's definitely true! It's Strange!
No possibility to change the default rule is an interface bug!
For persistent: iSCSI configuration (targets, LUNs, default rules, masking) are kept in [iscsi_trgt.conf] - and you can make changes to the default rule using this file.
But beware!
The file/service is bizarrely designed and retains information about all *ever existing* targets and LUNs.
Even - after deleting LUN or target - information about it is not removed from [iscsi_trgt.conf]!
Strange!?

Post Reply

Return to “iSCSI – Target & Virtual Disk”