Controlled discovery of san-attached SCSI devices and access control via login authentication
View Patent ↗A method for accessing data in a storage area network is provided. The method initiates with receiving a request for a list of targets on the storage area network. All the targets on the storage area network are exposed to the requester and authentication requiring a password is requested from the requester to grant access to the targets on the storage are network. Access to the targets is granted if the password is acceptable, and access to the targets is refused if the password is unacceptable.
1. A method for accessing data in a storage area network, comprising:
receiving a request for a list of targets on the storage area network from a requestor;
exposing all the targets on the storage area network to the requestor;
requesting authentication requiring a password from the requestor to grant access to the targets on the storage area network, wherein the password is generated based on a name of one of the targets;
granting access to the targets if the password is acceptable; and
refusing access to the targets if the password is unacceptable, wherein the granting and the refusing are performed without utilizing mapping techniques having any prior knowledge of the requestor, and wherein the access to the targets is invoked upon establishment of an initial relationship between the requestor and the targets on the storage area network,
wherein the password is an Internet Small Computer System Interface Qualified Name (IQN),
wherein the password is uniquely indexed through a target-name and a user name pair for each of the targets.
2. The method of claim 1 , wherein a user name is set to an Internet Small Computer System Interface Qualified Name (IQN).
3. The method of claim 1 , wherein each target grants access directly to each requestor.
4. The method of claim 1 , wherein the request is generated from Internet Small Computer System Interface (iSCSI) initiator code.
5. A non transitory computer readable medium having program instructions for accessing data in a storage area network, comprising:
program instructions for receiving a request for a list of targets on the storage area network;
program instructions for exposing all the targets on the storage area network to the requestor;
program instructions for requesting authentication requiring a password from the requestor to grant access to the targets on the storage area network, wherein the password is generated based on a name of one of the targets;
program instructions for granting access to the targets if the password is acceptable; and
program instructions for refusing access to the targets if the password is unacceptable, wherein the program instructions for the granting and the program instructions for the refusing are performed without utilizing mapping techniques having any prior knowledge of the requestor, and wherein the access to the targets is invoked upon establishment of an initial relationship between the requestor and the targets on the storage area network,
wherein the password is an Internet Small Computer System Interface Qualified Name (IQN),
wherein the password is uniquely indexed through a target-name and a user name pair for each of the targets.
6. The computer readable medium of claim 5 , wherein a user name is set to an Internet Small Computer System Interface Qualified Name (IQN).
7. The computer readable medium of claim 5 , wherein each target grants access directly to each requestor.
8. The computer readable medium of claim 5 , wherein the request is generated from Internet Small Computer System Interface (iSCSI) initiator code.