openstack
/
devstack
Code Issues Proposed changes

Only set chap algorithms if not openeuler 

For some reason, setting the CHAPAlgorithms as in c3b705138
breaks OpenEuler.  Making this conditional so that tests continue
to pass.

Change-Id: Iaa740ecfbb9173dd97e90485bad88225caedb523
This commit is contained in:
Ade Lee 2022-01-05 16:23:46 -05:00
parent 9154bf543d
commit ac958698d0
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/nova
View File

@ -320,8 +320,12 @@ EOF
fi
# set chap algorithms. The default chap_algorithm is md5 which will
# not work under FIPS
iniset -sudo /etc/iscsi/iscsid.conf DEFAULT "node.session.auth.chap_algs" "SHA3-256,SHA256"
# not work under FIPS.
# FIXME(alee) For some reason, this breaks openeuler. Openeuler devs should weigh in
# and determine the correct solution for openeuler here
if ! is_openeuler; then
iniset -sudo /etc/iscsi/iscsid.conf DEFAULT "node.session.auth.chap_algs" "SHA3-256,SHA256"
fi
# ensure that iscsid is started, even when disabled by default
restart_service iscsid