openstack/devstack
Code Issues Proposed changes

Merge "Only set chap algorithms if not openeuler"

Browse Source
This commit is contained in:
Zuul 2022-01-07 19:21:40 +00:00 committed by Gerrit Code Review
commit 6133c1c959
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/nova
View File

@ -320,8 +320,12 @@ EOF
fi
# set chap algorithms. The default chap_algorithm is md5 which will
# not work under FIPS
iniset -sudo /etc/iscsi/iscsid.conf DEFAULT "node.session.auth.chap_algs" "SHA3-256,SHA256"
# not work under FIPS.
# FIXME(alee) For some reason, this breaks openeuler. Openeuler devs should weigh in
# and determine the correct solution for openeuler here
if ! is_openeuler; then
iniset -sudo /etc/iscsi/iscsid.conf DEFAULT "node.session.auth.chap_algs" "SHA3-256,SHA256"
fi
# ensure that iscsid is started, even when disabled by default
restart_service iscsid