1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
23 */
24 #include <stdlib.h>
25 #include <stdio.h>
26 #include <sys/types.h>
27 #include <sys/stat.h>
28 #include <fcntl.h>
29 #include <unistd.h>
30 #include <errno.h>
31 #include <string.h>
32 #include <getopt.h>
33 #include <strings.h>
34 #include <ctype.h>
35 #include <libnvpair.h>
36 #include <libintl.h>
37 #include <libgen.h>
38 #include <pwd.h>
39 #include <auth_attr.h>
40 #include <secdb.h>
41 #include <libscf.h>
42 #include <limits.h>
43 #include <locale.h>
44
45 #include <libstmf.h>
46 #include <libiscsit.h>
47
48 /* what's this used for?? */
49 #define ITADM_VERSION "1.0"
50
51 /* SMF service info */
52 #define ISCSIT_SVC "svc:/network/iscsi/target:default"
53
54 #define STMF_STALE(ret) {\
55 if (ret == STMF_ERROR_PROV_DATA_STALE) {\
56 output_config_error(ret, NULL);\
57 } else if (ret != 0) {\
58 output_config_error(ret,\
59 gettext("Configuration change failed"));\
60 }\
61 }
62
63 #define ITADM_CHKAUTH(sec) {\
64 if (!chkauthattr(sec, itadm_uname)) {\
65 (void) fprintf(stderr,\
66 gettext("Error, operation requires authorization %s"),\
67 sec);\
68 (void) fprintf(stderr, "\n");\
69 return (1);\
70 }\
71 }
72
73
74 static struct option itadm_long[] = {
75 {"alias", required_argument, NULL, 'l'},
76 {"auth-method", required_argument, NULL, 'a'},
77 {"chap-secret", no_argument, NULL, 's'},
78 {"chap-secret-file", required_argument, NULL, 'S'},
79 {"chap-user", required_argument, NULL, 'u'},
80 {"force", no_argument, NULL, 'f'},
81 {"help", no_argument, NULL, 'h'},
82 {"help", no_argument, NULL, '?'},
83 {"isns", required_argument, NULL, 'i'},
84 {"isns-server", required_argument, NULL, 'I'},
85 {"node-name", required_argument, NULL, 'n'},
86 {"radius-secret", no_argument, NULL, 'd'},
87 {"radius-secret-file", required_argument, NULL, 'D'},
88 {"radius-server", required_argument, NULL, 'r'},
89 {"tpg-tag", required_argument, NULL, 't'},
90 {"verbose", no_argument, NULL, 'v'},
91 {"version", no_argument, NULL, 'V'},
92 {NULL, 0, NULL, 0}
93 };
94
95 char c_tgt[] = "itadm create-target [-a radius|chap|none|default] [-s] \
96 [-S chap-secret-path] [-u chap-username] [-n target-node-name] \
97 [-l alias] [-t tpg-name[,tpg-name,...]]";
98
99 static char m_tgt[] = "itadm modify-target [-a radius|chap|none|default] [-s] \
100 [-S chap-secret-path] [-u chap-username] [-n new-target-node-name] \
101 [-l alias] [-t tpg-name[,tpg-name,...]] target-node-name";
102
103 static char d_tgt[] = "itadm delete-target [-f] target-node-name";
104
105 static char l_tgt[] = "itadm list-target [-v] [target-node-name]";
106
107 static char c_tpg[] = "itadm create-tpg tpg-name IP-address[:port] \
108 [IP-address[:port]] [...]";
109
110 static char l_tpg[] = "itadm list-tpg [-v] [tpg-name]";
111
112 static char d_tpg[] = "itadm delete-tpg [-f] tpg-name";
113
114 static char c_ini[] = "itadm create-initiator [-s] [-S chap-secret-path] \
115 [-u chap-username] initiator-node-name";
116
117 static char m_ini[] = "itadm modify-initiator [-s] [-S chap-secret-path] \
118 [-u chap-username] initiator-node-name";
119
120 static char l_ini[] = "itadm list-initiator [-v] initiator-node-name";
121
122 static char d_ini[] = "itadm delete-initiator initiator-node-name";
123
124 static char m_def[] = "itadm modify-defaults [-a radius|chap|none] \
125 [-r IP-address[:port]] [-d] [-D radius-secret-path] [-i enable|disable] \
126 [-I IP-address[:port][,IP-adddress[:port]]]";
127
128 static char l_def[] = "itadm list-defaults";
129
130
131 /* keep the order of this enum in the same order as the 'subcmds' struct */
132 typedef enum {
133 CREATE_TGT,
134 MODIFY_TGT,
135 DELETE_TGT,
136 LIST_TGT,
137 CREATE_TPG,
138 DELETE_TPG,
139 LIST_TPG,
140 CREATE_INI,
141 MODIFY_INI,
142 LIST_INI,
143 DELETE_INI,
144 MODIFY_DEF,
145 LIST_DEF,
146 NULL_SUBCMD /* must always be last! */
147 } itadm_sub_t;
148
149 typedef struct {
150 char *name;
151 char *shortopts;
152 char *usemsg;
153 } itadm_subcmds_t;
154
155 static itadm_subcmds_t subcmds[] = {
156 {"create-target", ":a:sS:u:n:l:t:h?", c_tgt},
157 {"modify-target", ":a:sS:u:n:l:t:h?", m_tgt},
158 {"delete-target", ":fh?", d_tgt},
159 {"list-target", ":vh?", l_tgt},
160 {"create-tpg", ":h?", c_tpg},
161 {"delete-tpg", ":fh?", d_tpg},
162 {"list-tpg", ":vh?", l_tpg},
163 {"create-initiator", ":sS:u:h?", c_ini},
164 {"modify-initiator", ":sS:u:h?", m_ini},
165 {"list-initiator", ":vh?", l_ini},
166 {"delete-initiator", ":h?", d_ini},
167 {"modify-defaults", ":a:r:dD:i:I:h?", m_def},
168 {"list-defaults", ":h?", l_def},
169 {NULL, ":h?", NULL},
170 };
171
172 /* used for checking if user is authorized */
173 static char *itadm_uname = NULL;
174
175 /* prototypes */
176 static int
177 itadm_get_password(nvlist_t *nvl, char *key, char *passfile,
178 char *phrase);
179
180 static int
181 itadm_opt_to_arr(nvlist_t *nvl, char *key, char *opt, uint32_t *num);
182
183 static int
184 create_target(char *tgt, nvlist_t *proplist);
185
186 static int
187 modify_target(char *tgt, char *new, nvlist_t *proplist);
188
189 static int
190 delete_target(char *tgt, boolean_t force);
191
192 static int
193 list_target(char *tgt, boolean_t verbose, boolean_t script);
194
195 static int
196 create_tpg(char *tpg, int addrc, char **addrs);
197
198 static int
199 list_tpg(char *tpg, boolean_t verbose, boolean_t script);
200
201 static int
202 delete_tpg(char *tpg, boolean_t force);
203
204 static int
205 modify_initiator(char *ini, nvlist_t *proplist, boolean_t create);
206
207 static int
208 list_initiator(char *ini, boolean_t verbose, boolean_t script);
209
210 static int
211 delete_initiator(char *ini);
212
213 static int
214 modify_defaults(nvlist_t *proplist);
215
216 static int
217 list_defaults(boolean_t script);
218
219 static void
220 tag_name_to_num(char *tagname, uint16_t *tagnum);
221
222 /* prototype from iscsit_common.h */
223 extern int
224 sockaddr_to_str(struct sockaddr_storage *sa, char **addr);
225
226 static void output_config_error(int error_code, char *msg);
227
228 int
229 main(int argc, char *argv[])
230 {
231 int ret = 0;
232 int idx = NULL_SUBCMD;
233 char c;
234 int newargc = argc;
235 char **newargv = NULL;
236 char *objp;
237 int itind = 0;
238 nvlist_t *proplist = NULL;
239 boolean_t verbose = B_FALSE;
240 boolean_t scripting = B_FALSE;
241 boolean_t tbool;
242 char *targetname = NULL;
243 char *propname;
244 boolean_t force = B_FALSE;
245 struct passwd *pwd = NULL;
246 uint32_t count = 0;
247 char *smfstate = NULL;
248
249 (void) setlocale(LC_ALL, "");
250 (void) textdomain(TEXT_DOMAIN);
251
252 if (argc < 2) {
253 ret = 1;
254 goto usage_error;
255 }
256
257 for (idx = 0; subcmds[idx].name != NULL; idx++) {
258 if (strcmp(argv[1], subcmds[idx].name) == 0) {
259 break;
260 }
261 }
262
263
264 /* get the caller's user name for subsequent chkauthattr() calls */
265 pwd = getpwuid(getuid());
266 if (pwd == NULL) {
267 (void) fprintf(stderr, "%s\n",
268 gettext("Could not determine callers user name"));
269 return (1);
270 }
271
272 itadm_uname = strdup(pwd->pw_name);
273
274 /* increment past command & subcommand */
275 newargc--;
276 newargv = &(argv[1]);
277
278 ret = nvlist_alloc(&proplist, NV_UNIQUE_NAME, 0);
279 if (ret != 0) {
280 ret = errno;
281 output_config_error(ret, gettext("Could not allocate nvlist"));
282 ret = 1;
283 goto usage_error;
284 }
285
286 while ((ret == 0) && (newargv)) {
287 c = getopt_long(newargc, newargv, subcmds[idx].shortopts,
288 itadm_long, &itind);
289 if (c == -1) {
290 break;
291 }
292
293 switch (c) {
294 case 0:
295 /* flag set by getopt */
296 break;
297 case 'a':
298 ret = nvlist_add_string(proplist,
299 "auth", optarg);
300 break;
301 case 'd':
302 ret = itadm_get_password(proplist,
303 "radiussecret", NULL,
304 gettext("Enter RADIUS secret: "));
305 break;
306 case 'D':
307 ret = itadm_get_password(proplist,
308 "radiussecret", optarg, NULL);
309 break;
310 case 'f':
311 force = B_TRUE;
312 break;
313 case '?':
314 /*
315 * '?' is returned for both unrecognized
316 * options and if explicitly provided on
317 * the command line. The latter should
318 * be handled the same as -h.
319 */
320 if (strcmp(newargv[optind-1], "-?") != 0) {
321 (void) fprintf(stderr,
322 gettext("Unrecognized option %s"),
323 newargv[optind-1]);
324 (void) fprintf(stderr, "\n");
325 ret = 1;
326 }
327 goto usage_error;
328 case 'h':
329 goto usage_error;
330 case 'i':
331 if (strncmp(optarg, "enable", strlen(optarg))
332 == 0) {
333 tbool = B_TRUE;
334 } else if (strncmp(optarg, "disable",
335 strlen(optarg)) == 0) {
336 tbool = B_FALSE;
337 } else {
338 (void) fprintf(stderr, "%s\n",
339 gettext("invalid value for -i"));
340 ret = 1;
341 break;
342 }
343 ret = nvlist_add_boolean_value(proplist,
344 "isns", tbool);
345 break;
346 case 'I':
347 /* possibly multi-valued */
348 ret = itadm_opt_to_arr(proplist,
349 "isnsserver", optarg, &count);
350 if ((ret == 0) && (count > 8)) {
351 (void) fprintf(stderr, "%s\n",
352 gettext(
353 "Too many iSNS servers specified, "
354 "maximum of 8 allowed"));
355 ret = 1;
356 }
357 break;
358 case 'l':
359 ret = nvlist_add_string(proplist,
360 "alias", optarg);
361 break;
362 case 'n':
363 targetname = strdup(optarg);
364 if (targetname == NULL) {
365 ret = ENOMEM;
366 }
367 break;
368 case 'r':
369 ret = nvlist_add_string(proplist,
370 "radiusserver", optarg);
371 break;
372 case 's':
373 if ((idx == CREATE_TGT) ||
374 (idx == MODIFY_TGT)) {
375 propname = "targetchapsecret";
376 } else {
377 propname = "chapsecret";
378 }
379 ret = itadm_get_password(proplist,
380 propname, NULL,
381 gettext("Enter CHAP secret: "));
382 break;
383 case 'S':
384 if ((idx == CREATE_TGT) ||
385 (idx == MODIFY_TGT)) {
386 propname = "targetchapsecret";
387 } else {
388 propname = "chapsecret";
389 }
390 ret = itadm_get_password(proplist,
391 propname, optarg, NULL);
392 break;
393 case 't':
394 /* possibly multi-valued */
395 ret = itadm_opt_to_arr(proplist,
396 "tpg-tag", optarg, NULL);
397 break;
398 case 'u':
399 if ((idx == CREATE_TGT) ||
400 (idx == MODIFY_TGT)) {
401 propname = "targetchapuser";
402 } else {
403 propname = "chapuser";
404 }
405 ret = nvlist_add_string(proplist,
406 propname, optarg);
407 break;
408 case 'v':
409 verbose = B_TRUE;
410 break;
411 case ':':
412 (void) fprintf(stderr,
413 gettext("Option %s requires an operand"),
414 newargv[optind-1]);
415 (void) fprintf(stderr, "\n");
416
417 /* fall through to default */
418 default:
419 ret = 1;
420 break;
421 }
422 }
423
424 if (ret != 0) {
425 goto usage_error;
426 }
427
428 /* after getopt() to allow handling of -h option */
429 if ((itadm_sub_t)idx == NULL_SUBCMD) {
430 (void) fprintf(stderr, "%s\n",
431 gettext("Error, no subcommand specified"));
432 ret = 1;
433 goto usage_error;
434 }
435
436 /*
437 * some subcommands take multiple operands, so adjust now that
438 * getopt is complete
439 */
440 newargc -= optind;
441 if (newargc == 0) {
442 newargv = NULL;
443 objp = NULL;
444 } else {
445 newargv = &(newargv[optind]);
446 objp = newargv[0];
447 }
448
449 if (objp == NULL) {
450 switch ((itadm_sub_t)idx) {
451 case MODIFY_TGT:
452 case DELETE_TGT:
453 case CREATE_TPG:
454 case DELETE_TPG:
455 case CREATE_INI:
456 case MODIFY_INI:
457 case DELETE_INI:
458 /* These subcommands need at least one operand */
459 (void) fprintf(stderr,
460 gettext("Error, %s requires an operand"),
461 subcmds[idx].name);
462 (void) fprintf(stderr, "\n");
463
464 ret = 1;
465 goto usage_error;
466 default:
467 break;
468 }
469 }
470
471 if (newargc > 1) {
472 switch ((itadm_sub_t)idx) {
473 case MODIFY_TGT:
474 case DELETE_TGT:
475 case LIST_TGT:
476 case DELETE_TPG:
477 case LIST_TPG:
478 case CREATE_INI:
479 case MODIFY_INI:
480 case LIST_INI:
481 case DELETE_INI:
482 /* These subcommands should have at most one operand */
483 (void) fprintf(stderr,
484 gettext("Error, %s accepts only a single operand"),
485 subcmds[idx].name);
486 (void) fprintf(stderr, "\n");
487
488 ret = 1;
489 goto usage_error;
490
491 default:
492 break;
493 }
494 }
495
496 if (newargc > 0) {
497 switch ((itadm_sub_t)idx) {
498 case CREATE_TGT:
499 case MODIFY_DEF:
500 case LIST_DEF:
501 /* These subcommands do not support an operand */
502 (void) fprintf(stderr,
503 gettext("Error, %s does not support any operands"),
504 subcmds[idx].name);
505 (void) fprintf(stderr, "\n");
506
507 ret = 1;
508 goto usage_error;
509
510 default:
511 break;
512 }
513 }
514
515 /*
516 * XXX - this should probably get pushed down to the library
517 * depending on the decision to allow/disallow configuratoin
518 * without the service running.
519 */
520 /*
521 * Make sure iSCSI target service is enabled before
522 * proceeding.
523 */
524 smfstate = smf_get_state(ISCSIT_SVC);
525 if (!smfstate ||
526 (strcmp(smfstate, SCF_STATE_STRING_ONLINE) != 0)) {
527 (void) fprintf(stderr, "%s\n",
528 gettext("The iSCSI target service must be online "
529 "before running this command."));
530 (void) fprintf(stderr,
531 gettext("Use 'svcadm enable -r %s'"), ISCSIT_SVC);
532 (void) fprintf(stderr, "\n");
533 (void) fprintf(stderr, "%s\n",
534 gettext("to enable the service and its prerequisite "
535 "services and/or"));
536 (void) fprintf(stderr,
537 gettext("'svcs -x %s' to determine why it is not online."),
538 ISCSIT_SVC);
539 (void) fprintf(stderr, "\n");
540
541 return (1);
542 }
543
544 switch ((itadm_sub_t)idx) {
545 case CREATE_TGT:
546 /*
547 * OK for targetname to be NULL here. If the
548 * user did not specify a target name,
549 * one will be generated.
550 */
551 ret = create_target(targetname, proplist);
552 break;
553 case MODIFY_TGT:
554 ret = modify_target(objp, targetname, proplist);
555 break;
556 case DELETE_TGT:
557 ret = delete_target(objp, force);
558 break;
559 case LIST_TGT:
560 ret = list_target(objp, verbose, scripting);
561 break;
562 case CREATE_TPG:
563 ret = create_tpg(objp, newargc - 1, &(newargv[1]));
564 break;
565 case DELETE_TPG:
566 ret = delete_tpg(objp, force);
567 break;
568 case LIST_TPG:
569 ret = list_tpg(objp, verbose, scripting);
570 break;
571 case CREATE_INI:
572 ret = modify_initiator(objp, proplist, B_TRUE);
573 break;
574 case MODIFY_INI:
575 ret = modify_initiator(objp, proplist, B_FALSE);
576 break;
577 case LIST_INI:
578 ret = list_initiator(objp, verbose, scripting);
579 break;
580 case DELETE_INI:
581 ret = delete_initiator(objp);
582 break;
583 case MODIFY_DEF:
584 ret = modify_defaults(proplist);
585 break;
586 case LIST_DEF:
587 ret = list_defaults(scripting);
588 break;
589 default:
590 ret = 1;
591 goto usage_error;
592 }
593
594 if (ret != 0) {
595 (void) fprintf(stderr,
596 gettext("itadm %s failed with error %d"),
597 subcmds[idx].name, ret);
598 (void) fprintf(stderr, "\n");
599 }
600 return (ret);
601
602 usage_error:
603 if (subcmds[idx].name) {
604 (void) printf("%s\n", gettext(subcmds[idx].usemsg));
605 } else {
606 /* overall usage */
607 (void) printf("%s\n\n", gettext("itadm usage:"));
608 for (idx = 0; subcmds[idx].name != NULL; idx++) {
609 if (!subcmds[idx].usemsg) {
610 continue;
611 }
612 (void) printf("\t%s\n", gettext(subcmds[idx].usemsg));
613 }
614 }
615
616 return (ret);
617 }
618
619 static int
620 create_target(char *tgt, nvlist_t *proplist)
621 {
622 int ret;
623 it_config_t *cfg = NULL;
624 it_tgt_t *tgtp;
625 char **tags = NULL;
626 uint32_t count = 0;
627 nvlist_t *errlist = NULL;
628 int i;
629 it_tpg_t *tpg = NULL;
630 uint16_t tagid = 0;
631 it_tpgt_t *tpgt;
632 char *sec = "solaris.smf.modify.stmf";
633 boolean_t did_it_config_load = B_FALSE;
634
635 ITADM_CHKAUTH(sec);
636
637 if (tgt) {
638 /*
639 * Validate target name.
640 */
641 if (!IS_IQN_NAME(tgt) && !IS_EUI_NAME(tgt)) {
642 (void) fprintf(stderr, gettext("Invalid name %s"),
643 tgt);
644 (void) fprintf(stderr, "\n");
645 return (EINVAL);
646 }
647 }
648
649 ret = it_config_load(&cfg);
650 if (ret != 0) {
651 output_config_error(ret,
652 gettext("Error retrieving iSCSI target configuration"));
653 goto done;
654 }
655
656 did_it_config_load = B_TRUE;
657
658 ret = it_tgt_create(cfg, &tgtp, tgt);
659 if (ret != 0) {
660 if (ret == EFAULT) {
661 (void) fprintf(stderr,
662 gettext("Invalid iSCSI name %s"), tgt);
663 (void) fprintf(stderr, "\n");
664 } else if (ret == EEXIST) {
665 (void) fprintf(stderr,
666 gettext("iSCSI target %s already configured"),
667 tgt);
668 (void) fprintf(stderr, "\n");
669 } else if (ret == E2BIG) {
670 (void) fprintf(stderr,
671 gettext("Maximum of %d iSCSI targets"),
672 MAX_TARGETS);
673 (void) fprintf(stderr, "\n");
674 } else {
675 output_config_error(ret,
676 gettext("Error creating target"));
677 }
678
679 goto done;
680 }
681
682 /* set the target portal group tags */
683 ret = nvlist_lookup_string_array(proplist, "tpg-tag", &tags,
684 &count);
685
686 if (ret == ENOENT) {
687 /* none specified. is this ok? */
688 ret = 0;
689 } else if (ret != 0) {
690 output_config_error(ret, gettext("Internal error"));
691 goto done;
692 }
693
694 /* special case, don't set any TPGs */
695 if (tags && (count == 1) && (strcmp("default", tags[0]) == 0)) {
696 count = 0;
697 }
698
699 for (i = 0; i < count; i++) {
700 if (!tags[i]) {
701 continue;
702 }
703
704 /* see that all referenced groups are already defined */
705 tpg = cfg->config_tpg_list;
706 while (tpg != NULL) {
707 if (strcmp(tags[i], tpg->tpg_name) == 0) {
708 break;
709 }
710
711 tpg = tpg->tpg_next;
712 }
713 if (tpg == NULL) {
714 (void) fprintf(stderr,
715 gettext("Invalid tpg-tag %s, tag not defined"),
716 tags[i]);
717 (void) fprintf(stderr, "\n");
718 ret = 1;
719 goto done;
720 }
721
722 /* generate the tag number to use */
723 tag_name_to_num(tags[i], &tagid);
724
725 ret = it_tpgt_create(cfg, tgtp, &tpgt, tags[i], tagid);
726 if (ret != 0) {
727 (void) fprintf(stderr, gettext(
728 "Could not add target portal group tag %s: "),
729 tags[i]);
730 output_config_error(ret, NULL);
731 goto done;
732 }
733 tagid++;
734 }
735
736 /* remove the tags from the proplist before continuing */
737 if (tags) {
738 (void) nvlist_remove_all(proplist, "tpg-tag");
739 }
740
741 ret = it_tgt_setprop(cfg, tgtp, proplist, &errlist);
742 if (ret != 0) {
743 (void) fprintf(stderr,
744 gettext("Error setting target properties: %d"), ret);
745 (void) fprintf(stderr, "\n");
746 if (errlist) {
747 nvpair_t *nvp = NULL;
748 char *nn;
749 char *nv;
750
751 while ((nvp = nvlist_next_nvpair(errlist, nvp))
752 != NULL) {
753 nv = NULL;
754
755 nn = nvpair_name(nvp);
756 (void) nvpair_value_string(nvp, &nv);
757
758 if (nv != NULL) {
759 (void) fprintf(stderr, "\t%s: %s\n",
760 nn, nv);
761 }
762 }
763
764 nvlist_free(errlist);
765 }
766 goto done;
767 }
768
769 if (ret == 0) {
770 ret = it_config_commit(cfg);
771 STMF_STALE(ret);
772 }
773
774 done:
775 if (ret == 0) {
776 (void) printf(gettext("Target %s successfully created"),
777 tgtp->tgt_name);
778 (void) printf("\n");
779 }
780
781 if (did_it_config_load)
782 it_config_free(cfg);
783
784 return (ret);
785 }
786
787 int
788 list_target(char *tgt, boolean_t verbose, boolean_t script)
789 {
790 int ret;
791 it_config_t *cfg;
792 it_tgt_t *ptr;
793 boolean_t found = B_FALSE;
794 boolean_t first = B_TRUE;
795 boolean_t first_tag = B_TRUE;
796 char *gauth = "none";
797 char *galias = "-";
798 char *auth;
799 char *alias;
800 char *chapu;
801 char *chaps;
802 it_tpgt_t *tagp;
803 char *sec = "solaris.smf.read.stmf";
804 stmfDevid devid;
805 stmfSessionList *sess = NULL;
806 stmfTargetProperties props;
807 char *state;
808 int num_sessions;
809
810 ITADM_CHKAUTH(sec);
811
812 ret = it_config_load(&cfg);
813 if (ret != 0) {
814 output_config_error(ret,
815 gettext("Error retrieving iSCSI target configuration"));
816 return (ret);
817 }
818
819 ptr = cfg->config_tgt_list;
820
821 /* grab global defaults for auth, alias */
822 if (cfg->config_global_properties) {
823 (void) nvlist_lookup_string(cfg->config_global_properties,
824 "alias", &galias);
825 (void) nvlist_lookup_string(cfg->config_global_properties,
826 "auth", &gauth);
827 }
828
829 for (; ptr != NULL; ptr = ptr->tgt_next) {
830 if (found) {
831 break;
832 }
833
834 if (tgt) {
835 /*
836 * We do a case-insensitive match in case
837 * a non-lower case value got stored.
838 */
839 if (strcasecmp(tgt, ptr->tgt_name) != 0) {
840 continue;
841 } else {
842 found = B_TRUE;
843 }
844 }
845
846 state = "-";
847 num_sessions = 0;
848 sess = NULL;
849
850 /*
851 * make a best effort to retrieve target status and
852 * number of active sessions from STMF.
853 */
854 ret = stmfDevidFromIscsiName(ptr->tgt_name, &devid);
855 if (ret == STMF_STATUS_SUCCESS) {
856 ret = stmfGetTargetProperties(&devid, &props);
857 if (ret == STMF_STATUS_SUCCESS) {
858 if (props.status == STMF_TARGET_PORT_ONLINE) {
859 state = "online";
860 } else {
861 state = "offline";
862 }
863 }
864 }
865 if (ret == STMF_STATUS_SUCCESS) {
866 ret = stmfGetSessionList(&devid, &sess);
867 if (ret == STMF_STATUS_SUCCESS) {
868 num_sessions = sess->cnt;
869 free(sess);
870 }
871 }
872
873 /* reset ret so we don't return an error */
874 ret = 0;
875
876 if (!script && first) {
877 (void) printf("%-61s%-9s%-9s\n", "TARGET NAME",
878 "STATE", "SESSIONS");
879 first = B_FALSE;
880 }
881
882 if (!script) {
883 /*
884 * try not to let columns run into each other.
885 * Stick a tab after too-long fields.
886 * Lengths chosen are for the 'common' cases.
887 */
888 (void) printf("%-61s", ptr->tgt_name);
889 if (strlen(ptr->tgt_name) > 60) {
890 (void) printf("\t");
891 }
892 (void) printf("%-9s%-9d", state, num_sessions);
893 } else {
894 (void) printf("%s\t%s\t%d", ptr->tgt_name,
895 state, num_sessions);
896 }
897
898 if (!verbose) {
899 (void) printf("\n");
900 continue;
901 }
902
903 auth = gauth;
904 alias = galias;
905 chapu = "-";
906 chaps = "unset";
907
908 if (ptr->tgt_properties) {
909 (void) nvlist_lookup_string(ptr->tgt_properties,
910 "auth", &auth);
911 (void) nvlist_lookup_string(ptr->tgt_properties,
912 "alias", &alias);
913 if (nvlist_exists(ptr->tgt_properties,
914 "targetchapsecret")) {
915 chaps = "set";
916 }
917 (void) nvlist_lookup_string(ptr->tgt_properties,
918 "targetchapuser", &chapu);
919 }
920
921 if (!script) {
922 (void) printf("\n\t%-20s\t%s\n\t%-20s\t%s %s\n"
923 "\t%-20s\t%s\n\t%-20s\t%s\n\t%-20s\t",
924 "alias:", alias, "auth:", auth,
925 ((auth == gauth) ? "(defaults)" : ""),
926 "targetchapuser:",
927 chapu, "targetchapsecret:", chaps, "tpg-tags:");
928 } else {
929 (void) printf("\t%s\t%s %s\t%s\t%s\t",
930 alias, auth,
931 ((auth == gauth) ? "(defaults)" : ""),
932 chapu, chaps);
933 }
934
935 first_tag = B_TRUE;
936 tagp = ptr->tgt_tpgt_list;
937 for (; tagp != NULL; tagp = tagp->tpgt_next) {
938 if (!first_tag) {
939 (void) printf(",");
940 } else {
941 first_tag = B_FALSE;
942 }
943 (void) printf("%s = %d",
944 tagp->tpgt_tpg_name, tagp->tpgt_tag);
945 }
946
947 if (first_tag) {
948 /* didn't find any */
949 (void) printf("default");
950 }
951
952 (void) printf("\n");
953 }
954
955 if (tgt && (!found)) {
956 (void) fprintf(stderr,
957 gettext("Target %s not found!"), tgt);
958 (void) fprintf(stderr, "\n");
959 ret = 1;
960 }
961
962 it_config_free(cfg);
963
964 return (ret);
965 }
966
967 int
968 delete_target(char *tgt, boolean_t force)
969 {
970 int ret;
971 it_config_t *cfg;
972 it_tgt_t *ptr;
973 char *sec = "solaris.smf.modify.stmf";
974
975 ITADM_CHKAUTH(sec);
976
977 if (!tgt) {
978 (void) fprintf(stderr, "%s\n",
979 gettext("Error, no target specified"));
980 return (EINVAL);
981 }
982
983 ret = it_config_load(&cfg);
984 if (ret != 0) {
985 output_config_error(ret,
986 gettext("Error retrieving iSCSI target configuration"));
987 return (ret);
988 }
989
990 ptr = cfg->config_tgt_list;
991 while (ptr) {
992 /*
993 * We do a case-insensitive match in case
994 * a non-lower case value got stored.
995 */
996 if (strcasecmp(ptr->tgt_name, tgt) == 0) {
997 break;
998 }
999
1000 ptr = ptr->tgt_next;
1001 }
1002
1003 if (ptr) {
1004 ret = it_tgt_delete(cfg, ptr, force);
1005
1006 if (ret != 0) {
1007 if (ret == EBUSY) {
1008 (void) fprintf(stderr,
1009 gettext("The target is online or busy. "
1010 "Use the -f (force) option, or "
1011 "'stmfadm offline-target %s'"), tgt);
1012 (void) fprintf(stderr, "\n");
1013 } else {
1014 output_config_error(ret, gettext(
1015 "Error deleting target"));
1016 }
1017 }
1018
1019 if (ret == 0) {
1020 ret = it_config_commit(cfg);
1021 STMF_STALE(ret);
1022 }
1023 } else {
1024 (void) fprintf(stderr,
1025 gettext("Target %s not found"), tgt);
1026 (void) fprintf(stderr, "\n");
1027 ret = 1;
1028 }
1029
1030 it_config_free(cfg);
1031
1032 return (ret);
1033 }
1034
1035 static int
1036 modify_target(char *tgt, char *newname, nvlist_t *proplist)
1037 {
1038 int ret;
1039 it_config_t *cfg = NULL;
1040 it_tgt_t *ptr = NULL;
1041 it_tgt_t *tgtp = NULL;
1042 char **tags = NULL;
1043 uint32_t count = 0;
1044 nvlist_t *errlist = NULL;
1045 int i;
1046 it_tpg_t *tpg = NULL;
1047 uint16_t tagid;
1048 it_tpgt_t *tpgt = NULL;
1049 char *sec = "solaris.smf.modify.stmf";
1050 boolean_t did_it_config_load = B_FALSE;
1051
1052 ITADM_CHKAUTH(sec);
1053
1054 /* XXX: Do we need to offline anything here too? */
1055
1056 if (!tgt) {
1057 (void) fprintf(stderr, "%s\n",
1058 gettext("Error, no target specified"));
1059 ret = EINVAL;
1060 goto done;
1061 }
1062
1063 ret = it_config_load(&cfg);
1064 if (ret != 0) {
1065 output_config_error(ret,
1066 gettext("Error retrieving iSCSI target configuration"));
1067 goto done;
1068 }
1069
1070 did_it_config_load = B_TRUE;
1071
1072 /*
1073 * If newname is specified, ensure it is a valid name.
1074 */
1075 if (newname) {
1076 if (!validate_iscsi_name(newname)) {
1077 (void) fprintf(stderr,
1078 gettext("Invalid iSCSI name %s"), newname);
1079 (void) fprintf(stderr, "\n");
1080 ret = 1;
1081 goto done;
1082 }
1083 }
1084
1085 /*
1086 * Loop through to verify that the target to be modified truly
1087 * exists. If this target is to be renamed, ensure the new
1088 * name is not already in use.
1089 */
1090 ptr = cfg->config_tgt_list;
1091 while (ptr) {
1092 /*
1093 * Does a target with the new name already exist?
1094 */
1095 if (newname &&
1096 (strcasecmp(newname, ptr->tgt_name) == 0)) {
1097 (void) fprintf(stderr,
1098 gettext("A target with name %s already exists"),
1099 newname);
1100 (void) fprintf(stderr, "\n");
1101 ret = 1;
1102 goto done;
1103 }
1104
1105 if (strcasecmp(ptr->tgt_name, tgt) == 0) {
1106 tgtp = ptr;
1107 }
1108
1109 ptr = ptr ->tgt_next;
1110 }
1111
1112 if (!tgtp) {
1113 (void) fprintf(stderr,
1114 gettext("Target %s not found"), tgt);
1115 (void) fprintf(stderr, "\n");
1116 ret = EINVAL;
1117 goto done;
1118 }
1119
1120 /* set the target portal group tags */
1121 ret = nvlist_lookup_string_array(proplist, "tpg-tag", &tags,
1122 &count);
1123
1124 if (ret == ENOENT) {
1125 /* none specified. is this ok? */
1126 ret = 0;
1127 } else if (ret != 0) {
1128 output_config_error(ret, gettext("Internal error"));
1129 goto done;
1130 }
1131
1132 /* special case, remove all explicit TPGs, and don't add any */
1133 if (tags && (count == 1) && (strcmp("default", tags[0]) == 0)) {
1134 count = 0;
1135 }
1136
1137 for (i = 0; i < count; i++) {
1138 if (!tags || !tags[i]) {
1139 continue;
1140 }
1141
1142 /* see that all referenced groups are already defined */
1143 tpg = cfg->config_tpg_list;
1144 while (tpg != NULL) {
1145 if (strcmp(tags[i], tpg->tpg_name) == 0) {
1146 break;
1147 }
1148 tpg = tpg->tpg_next;
1149 }
1150 if (tpg == NULL) {
1151 (void) fprintf(stderr,
1152 gettext("Invalid tpg-name %s: not defined"),
1153 tags[i]);
1154 (void) fprintf(stderr, "\n");
1155 ret = 1;
1156 goto done;
1157 }
1158 }
1159
1160 /*
1161 * don't recreate tags that are already associated,
1162 * remove tags not requested.
1163 */
1164 if (tags) {
1165 tpgt = tgtp->tgt_tpgt_list;
1166 while (tpgt) {
1167 for (i = 0; i < count; i++) {
1168 if (!tags[i]) {
1169 continue;
1170 }
1171
1172 if (strcmp(tpgt->tpgt_tpg_name, tags[i])
1173 == 0) {
1174 /* non-null tags will be created */
1175 tags[i] = NULL;
1176 break;
1177 }
1178 }
1179 if (i == count) {
1180 /* one to remove */
1181 it_tpgt_t *ptr = tpgt;
1182
1183 tpgt = ptr->tpgt_next;
1184 it_tpgt_delete(cfg, tgtp, ptr);
1185 } else {
1186 tpgt = tpgt->tpgt_next;
1187 }
1188 }
1189 }
1190
1191 /* see if there are any left to add */
1192 for (i = 0; i < count; i++) {
1193 if (!tags || !tags[i]) {
1194 continue;
1195 }
1196
1197 /* generate the tag number to use */
1198 tag_name_to_num(tags[i], &tagid);
1199
1200 ret = it_tpgt_create(cfg, tgtp, &tpgt, tags[i], tagid);
1201 if (ret != 0) {
1202 if (ret == E2BIG) {
1203 (void) fprintf(stderr, "%s\n",
1204 gettext("Error, no portal tag available"));
1205 } else {
1206 (void) fprintf(stderr, gettext(
1207 "Could not add target portal group"
1208 " tag %s: "), tags[i]);
1209 output_config_error(ret, NULL);
1210 }
1211 goto done;
1212 }
1213 }
1214
1215 /* remove the tags from the proplist before continuing */
1216 (void) nvlist_remove_all(proplist, "tpg-tag");
1217
1218 /*
1219 * Rename this target, if requested. Save the old name in
1220 * the property list, so the kernel knows this is a renamed
1221 * target, and not a new one.
1222 */
1223 if (newname && (strlen(newname) > 0)) {
1224 ret = nvlist_add_string(proplist, "oldtargetname",
1225 tgtp->tgt_name);
1226 if (ret != 0) {
1227 output_config_error(ret,
1228 gettext("Error renaming target"));
1229 goto done;
1230 }
1231 (void) strlcpy(tgtp->tgt_name, newname,
1232 sizeof (tgtp->tgt_name));
1233 }
1234
1235 ret = it_tgt_setprop(cfg, tgtp, proplist, &errlist);
1236 if (ret != 0) {
1237 (void) fprintf(stderr,
1238 gettext("Error setting target properties: %d"), ret);
1239 (void) fprintf(stderr, "\n");
1240 if (errlist) {
1241 nvpair_t *nvp = NULL;
1242 char *nn;
1243 char *nv;
1244
1245 while ((nvp = nvlist_next_nvpair(errlist, nvp))
1246 != NULL) {
1247 nv = NULL;
1248
1249 nn = nvpair_name(nvp);
1250 (void) nvpair_value_string(nvp, &nv);
1251
1252 if (nv != NULL) {
1253 (void) fprintf(stderr, "\t%s: %s\n",
1254 nn, nv);
1255 }
1256 }
1257
1258 nvlist_free(errlist);
1259 }
1260 goto done;
1261 }
1262
1263 if (ret == 0) {
1264 ret = it_config_commit(cfg);
1265 STMF_STALE(ret);
1266 }
1267
1268 done:
1269 if (ret == 0) {
1270 (void) printf(gettext("Target %s successfully modified"),
1271 tgtp->tgt_name);
1272 (void) printf("\n");
1273 }
1274
1275 if (did_it_config_load)
1276 it_config_free(cfg);
1277
1278 return (ret);
1279 }
1280
1281 int
1282 create_tpg(char *tpg, int addrc, char **addrs)
1283 {
1284 int ret;
1285 it_config_t *cfg;
1286 it_tpg_t *tpgp;
1287 int count = 0;
1288 it_portal_t *ptl;
1289 char *sec = "solaris.smf.modify.stmf";
1290 int i = 0;
1291
1292 ITADM_CHKAUTH(sec);
1293
1294 if (!tpg) {
1295 (void) fprintf(stderr, "%s\n",
1296 gettext("Error, no target portal group specified"));
1297 return (EINVAL);
1298 }
1299
1300 if (strlen(tpg) > (MAX_TPG_NAMELEN - 1)) {
1301 (void) fprintf(stderr,
1302 gettext("Target Portal Group name must be no longer "
1303 "than %d characters"), (MAX_TPG_NAMELEN - 1));
1304 (void) fprintf(stderr, "\n");
1305 return (EINVAL);
1306 }
1307
1308 if (!addrs || (addrc <= 0)) {
1309 (void) fprintf(stderr, "%s\n",
1310 gettext("Error, no portal addresses specified"));
1311 return (EINVAL);
1312 }
1313
1314 ret = it_config_load(&cfg);
1315 if (ret != 0) {
1316 output_config_error(ret,
1317 gettext("Error retrieving iSCSI target configuration"));
1318 return (ret);
1319 }
1320
1321 tpgp = cfg->config_tpg_list;
1322 while (tpgp != NULL) {
1323 if (strcmp(tpgp->tpg_name, tpg) == 0) {
1324 (void) fprintf(stderr,
1325 gettext("Target Portal Group %s already exists"),
1326 tpg);
1327 (void) fprintf(stderr, "\n");
1328 it_config_free(cfg);
1329 return (1);
1330 }
1331 tpgp = tpgp->tpg_next;
1332 }
1333
1334 /*
1335 * Ensure that the addrs don't contain commas.
1336 */
1337 for (i = 0; i < addrc; i++) {
1338 if (strchr(addrs[i], ',')) {
1339 (void) fprintf(stderr,
1340 gettext("Bad portal name %s"),
1341 addrs[i]);
1342 (void) fprintf(stderr, "\n");
1343
1344 it_config_free(cfg);
1345 return (EINVAL);
1346 }
1347 }
1348
1349 /*
1350 * Create the portal group and first portal
1351 */
1352 ret = it_tpg_create(cfg, &tpgp, tpg, addrs[count]);
1353 if (ret != 0) {
1354 if (ret == EEXIST) {
1355 (void) fprintf(stderr,
1356 gettext("Portal %s already in use"),
1357 addrs[count]);
1358 (void) fprintf(stderr, "\n");
1359 } else {
1360 output_config_error(ret, gettext("Could not create the "
1361 "target portal group"));
1362 }
1363 it_config_free(cfg);
1364 return (ret);
1365 }
1366
1367 /*
1368 * Add the remaining portals
1369 */
1370 for (count = 1; count < addrc; count++) {
1371 if (!addrs[count]) {
1372 continue;
1373 }
1374
1375 ret = it_portal_create(cfg, tpgp, &ptl, addrs[count]);
1376 if (ret != 0) {
1377 if (ret == EEXIST) {
1378 (void) fprintf(stderr,
1379 gettext("Portal %s already in use"),
1380 addrs[count]);
1381 (void) fprintf(stderr, "\n");
1382 } else {
1383 (void) fprintf(stderr,
1384 gettext("Error adding portal %s: "),
1385 addrs[count]);
1386 output_config_error(ret, NULL);
1387 break;
1388 }
1389 }
1390 }
1391
1392 if (ret == 0) {
1393 ret = it_config_commit(cfg);
1394 STMF_STALE(ret);
1395 }
1396
1397 it_config_free(cfg);
1398
1399 return (ret);
1400 }
1401
1402 static int
1403 list_tpg(char *tpg, boolean_t verbose, boolean_t script)
1404 {
1405 int ret;
1406 it_config_t *cfg;
1407 it_tpg_t *ptr;
1408 boolean_t found = B_FALSE;
1409 it_portal_t *portal;
1410 boolean_t first = B_TRUE;
1411 boolean_t first_portal;
1412 char *pstr;
1413 char *sec = "solaris.smf.read.stmf";
1414
1415 ITADM_CHKAUTH(sec);
1416
1417 ret = it_config_load(&cfg);
1418 if (ret != 0) {
1419 output_config_error(ret,
1420 gettext("Error retrieving iSCSI target configuration"));
1421 return (ret);
1422 }
1423
1424 ptr = cfg->config_tpg_list;
1425
1426 for (; ptr != NULL; ptr = ptr->tpg_next) {
1427 if (found) {
1428 break;
1429 }
1430
1431 if (tpg) {
1432 if (strcmp(tpg, ptr->tpg_name) != 0) {
1433 continue;
1434 } else {
1435 found = B_TRUE;
1436 }
1437 }
1438
1439 if (!script && first) {
1440 (void) printf("%-30s%-9s\n", "TARGET PORTAL GROUP",
1441 "PORTAL COUNT");
1442 first = B_FALSE;
1443 }
1444
1445 if (!script) {
1446 (void) printf("%-30s", ptr->tpg_name);
1447 if (strlen(ptr->tpg_name) > 30) {
1448 (void) printf("\t");
1449 }
1450 (void) printf("%-9d", ptr->tpg_portal_count);
1451 } else {
1452 (void) printf("%s\t%d", ptr->tpg_name,
1453 ptr->tpg_portal_count);
1454 }
1455
1456 if (!verbose) {
1457 (void) printf("\n");
1458 continue;
1459 }
1460
1461 if (!script) {
1462 (void) printf("\n portals:");
1463 }
1464
1465 first_portal = B_TRUE;
1466
1467 portal = ptr->tpg_portal_list;
1468 for (; portal != NULL; portal = portal->portal_next) {
1469 ret = sockaddr_to_str(&(portal->portal_addr), &pstr);
1470 if (ret != 0) {
1471 /* invalid addr? */
1472 continue;
1473 }
1474 if (!first_portal) {
1475 (void) printf(",");
1476 } else {
1477 (void) printf("\t");
1478 first_portal = B_FALSE;
1479 }
1480
1481 (void) printf("%s", pstr);
1482 free(pstr);
1483 }
1484
1485 if (first_portal) {
1486 /* none found */
1487 (void) printf("\t<none>");
1488 }
1489
1490 (void) printf("\n");
1491 }
1492
1493 if (tpg && (!found)) {
1494 (void) fprintf(stderr,
1495 gettext("Target Portal Group %s not found!\n"), tpg);
1496 (void) fprintf(stderr, "\n");
1497 ret = 1;
1498 }
1499
1500 it_config_free(cfg);
1501
1502 return (ret);
1503 }
1504
1505 static int
1506 delete_tpg(char *tpg, boolean_t force)
1507 {
1508 int ret;
1509 it_config_t *cfg;
1510 it_tpg_t *ptpg = NULL;
1511 char *sec = "solaris.smf.modify.stmf";
1512
1513 ITADM_CHKAUTH(sec);
1514
1515 if (!tpg) {
1516 (void) fprintf(stderr, "%s\n",
1517 gettext("Error, no target portal group specified"));
1518 return (EINVAL);
1519 }
1520
1521 ret = it_config_load(&cfg);
1522 if (ret != 0) {
1523 output_config_error(ret,
1524 gettext("Error retrieving iSCSI target configuration"));
1525 return (ret);
1526 }
1527
1528 ptpg = cfg->config_tpg_list;
1529 for (; ptpg != NULL; ptpg = ptpg->tpg_next) {
1530 if (strcmp(tpg, ptpg->tpg_name) == 0) {
1531 break;
1532 }
1533 }
1534
1535 if (!ptpg) {
1536 (void) fprintf(stderr,
1537 gettext("Target portal group %s does not exist"),
1538 tpg);
1539 (void) fprintf(stderr, "\n");
1540 ret = 1;
1541 } else {
1542 ret = it_tpg_delete(cfg, ptpg, force);
1543 if (ret == EBUSY) {
1544 (void) fprintf(stderr, "%s\n",
1545 gettext(
1546 "Target portal group associated with one or more "
1547 "targets. Cannot delete."));
1548 } else if (ret != 0) {
1549 output_config_error(ret, gettext("Could not delete "
1550 "target portal group"));
1551 }
1552
1553 if (ret == 0) {
1554 ret = it_config_commit(cfg);
1555 STMF_STALE(ret);
1556 }
1557 }
1558
1559 it_config_free(cfg);
1560
1561 return (ret);
1562 }
1563
1564 static int
1565 modify_initiator(char *ini, nvlist_t *proplist, boolean_t create)
1566 {
1567 int ret;
1568 it_config_t *cfg;
1569 it_ini_t *inip;
1570 nvlist_t *errlist = NULL;
1571 nvpair_t *nvp = NULL;
1572 char *sec = "solaris.smf.modify.stmf";
1573 boolean_t changed = B_TRUE;
1574
1575 ITADM_CHKAUTH(sec);
1576
1577 if (!ini) {
1578 (void) fprintf(stderr, "%s\n",
1579 gettext("Error, no initiator specified"));
1580 return (EINVAL);
1581 } else if (create) {
1582 /*
1583 * validate input name - what are the rules for EUI
1584 * and IQN values?
1585 */
1586 if (!IS_IQN_NAME(ini) && !IS_EUI_NAME(ini)) {
1587 (void) fprintf(stderr, gettext("Invalid name %s"),
1588 ini);
1589 (void) fprintf(stderr, "\n");
1590 return (EINVAL);
1591 }
1592 }
1593
1594 /*
1595 * See if any properties were actually specified.
1596 */
1597 if (proplist) {
1598 nvp = nvlist_next_nvpair(proplist, nvp);
1599 }
1600
1601 if ((nvp == NULL) && !create) {
1602 changed = B_FALSE;
1603 }
1604
1605 /*
1606 * If no properties, and this is really a modify op, verify
1607 * that the requested initiator exists, but then don't do anything.
1608 * Modifying non-existent is an error; doing nothing to a defined
1609 * initiator is not.
1610 */
1611
1612 ret = it_config_load(&cfg);
1613 if (ret != 0) {
1614 output_config_error(ret,
1615 gettext("Error retrieving iSCSI target configuration"));
1616 return (ret);
1617 }
1618
1619 inip = cfg->config_ini_list;
1620 while (inip) {
1621 if (strcasecmp(inip->ini_name, ini) == 0) {
1622 break;
1623 }
1624
1625 inip = inip->ini_next;
1626 }
1627
1628 if (create) {
1629 if (inip) {
1630 (void) fprintf(stderr,
1631 gettext("Initiator %s already exists"),
1632 inip->ini_name);
1633 (void) fprintf(stderr, "\n");
1634 ret = EINVAL;
1635 } else {
1636 ret = it_ini_create(cfg, &inip, ini);
1637 if (ret != 0) {
1638 if (ret == EFAULT) {
1639 (void) fprintf(stderr,
1640 gettext("Invalid iSCSI name %s"),
1641 ini);
1642 (void) fprintf(stderr, "\n");
1643 } else {
1644 output_config_error(ret, gettext(
1645 "Error creating initiator"));
1646 }
1647 }
1648 }
1649 } else if (!inip) {
1650 ret = ENOENT;
1651 (void) fprintf(stderr,
1652 gettext("Error, initiator %s not found"),
1653 ini);
1654 (void) fprintf(stderr, "\n");
1655 }
1656
1657 if ((ret == 0) && nvp) {
1658 ret = it_ini_setprop(inip, proplist, &errlist);
1659
1660 if (ret != 0) {
1661 (void) fprintf(stderr,
1662 gettext("Error setting initiator properties: %d"),
1663 ret);
1664 (void) fprintf(stderr, "\n");
1665 if (errlist) {
1666 nvpair_t *nvp = NULL;
1667 char *nn;
1668 char *nv;
1669
1670 while ((nvp = nvlist_next_nvpair(errlist, nvp))
1671 != NULL) {
1672 nv = NULL;
1673
1674 nn = nvpair_name(nvp);
1675 (void) nvpair_value_string(nvp, &nv);
1676
1677 if (nv != NULL) {
1678 (void) fprintf(stderr,
1679 "\t%s: %s\n", nn, nv);
1680 }
1681 }
1682
1683 nvlist_free(errlist);
1684 }
1685 }
1686 }
1687
1688 if ((ret == 0) && changed) {
1689 ret = it_config_commit(cfg);
1690 STMF_STALE(ret);
1691 }
1692
1693 it_config_free(cfg);
1694
1695 return (ret);
1696 }
1697
1698 static int
1699 list_initiator(char *ini, boolean_t verbose, boolean_t script) /* ARGSUSED */
1700 {
1701 int ret;
1702 it_config_t *cfg;
1703 it_ini_t *ptr;
1704 boolean_t found = B_FALSE;
1705 boolean_t first = B_TRUE;
1706 char *isecret;
1707 char *iuser;
1708 char *sec = "solaris.smf.read.stmf";
1709
1710 ITADM_CHKAUTH(sec);
1711
1712 ret = it_config_load(&cfg);
1713 if (ret != 0) {
1714 output_config_error(ret,
1715 gettext("Error retrieving iSCSI target configuration"));
1716 return (ret);
1717 }
1718
1719 ptr = cfg->config_ini_list;
1720
1721 for (; ptr != NULL; ptr = ptr->ini_next) {
1722 isecret = "unset";
1723 iuser = "<none>";
1724
1725 if (found) {
1726 break;
1727 }
1728
1729 if (ini) {
1730 if (strcasecmp(ini, ptr->ini_name) != 0) {
1731 continue;
1732 } else {
1733 found = B_TRUE;
1734 }
1735 }
1736
1737 if (ptr->ini_properties) {
1738 if (nvlist_exists(ptr->ini_properties, "chapsecret")) {
1739 isecret = "set";
1740 }
1741 (void) nvlist_lookup_string(ptr->ini_properties,
1742 "chapuser", &iuser);
1743
1744 }
1745
1746 /* there's nothing to print for verbose yet */
1747 if (!script && first) {
1748 (void) printf("%-61s%-10s%-7s\n", "INITIATOR NAME",
1749 "CHAPUSER", "SECRET");
1750 first = B_FALSE;
1751 }
1752
1753 if (!script) {
1754 /*
1755 * try not to let columns run into each other.
1756 * Stick a tab after too-long fields.
1757 * Lengths chosen are for the 'common' cases.
1758 */
1759 (void) printf("%-61s", ptr->ini_name);
1760
1761 if (strlen(ptr->ini_name) > 60) {
1762 (void) printf("\t");
1763 }
1764
1765 (void) printf("%-15s", iuser);
1766 if (strlen(iuser) >= 15) {
1767 (void) printf("\t");
1768 }
1769
1770 (void) printf("%-4s", isecret);
1771 } else {
1772 (void) printf("%s\t%s\t%s", ptr->ini_name,
1773 iuser, isecret);
1774 }
1775
1776 (void) printf("\n");
1777 }
1778
1779 if (ini && (!found)) {
1780 (void) fprintf(stderr,
1781 gettext("Initiator %s not found!"), ini);
1782 (void) fprintf(stderr, "\n");
1783 ret = 1;
1784 }
1785
1786 it_config_free(cfg);
1787
1788 return (ret);
1789 }
1790
1791 int
1792 delete_initiator(char *ini)
1793 {
1794 int ret;
1795 it_config_t *cfg;
1796 it_ini_t *ptr;
1797 char *sec = "solaris.smf.modify.stmf";
1798
1799 ITADM_CHKAUTH(sec);
1800
1801 if (!ini) {
1802 (void) fprintf(stderr, "%s\n",
1803 gettext("Error, no initiator specified"));
1804 return (EINVAL);
1805 }
1806
1807 ret = it_config_load(&cfg);
1808 if (ret != 0) {
1809 output_config_error(ret,
1810 gettext("Error retrieving iSCSI target configuration"));
1811 return (ret);
1812 }
1813
1814 ptr = cfg->config_ini_list;
1815 while (ptr) {
1816 if (strcasecmp(ptr->ini_name, ini) == 0) {
1817 break;
1818 }
1819
1820 ptr = ptr->ini_next;
1821 }
1822
1823 if (ptr) {
1824 it_ini_delete(cfg, ptr);
1825
1826 ret = it_config_commit(cfg);
1827 STMF_STALE(ret);
1828 } else {
1829 (void) fprintf(stderr,
1830 gettext("Initiator %s not found"), ini);
1831 (void) fprintf(stderr, "\n");
1832 ret = 1;
1833 }
1834
1835 return (ret);
1836 }
1837
1838 static int
1839 modify_defaults(nvlist_t *proplist)
1840 {
1841 int ret;
1842 it_config_t *cfg;
1843 nvlist_t *errlist = NULL;
1844 nvpair_t *nvp = NULL;
1845 char *sec = "solaris.smf.modify.stmf";
1846
1847 ITADM_CHKAUTH(sec);
1848
1849 if (proplist) {
1850 /* make sure at least one property is specified */
1851 nvp = nvlist_next_nvpair(proplist, nvp);
1852 }
1853
1854 if (nvp == NULL) {
1855 /* empty list */
1856 (void) fprintf(stderr, "%s\n",
1857 gettext("Error, no properties specified"));
1858 return (EINVAL);
1859 }
1860
1861 ret = it_config_load(&cfg);
1862 if (ret != 0) {
1863 output_config_error(ret,
1864 gettext("Error retrieving iSCSI target configuration"));
1865 return (ret);
1866 }
1867
1868 ret = it_config_setprop(cfg, proplist, &errlist);
1869 if (ret != 0) {
1870 (void) fprintf(stderr,
1871 gettext("Error setting global properties: %d"),
1872 ret);
1873 (void) fprintf(stderr, "\n");
1874 if (errlist) {
1875 nvpair_t *nvp = NULL;
1876 char *nn;
1877 char *nv;
1878
1879 while ((nvp = nvlist_next_nvpair(errlist, nvp))
1880 != NULL) {
1881 nv = NULL;
1882
1883 nn = nvpair_name(nvp);
1884 (void) nvpair_value_string(nvp, &nv);
1885
1886 if (nv != NULL) {
1887 (void) fprintf(stderr, "\t%s: %s\n",
1888 nn, nv);
1889 }
1890 }
1891
1892 nvlist_free(errlist);
1893 }
1894 }
1895
1896 if (ret == 0) {
1897 ret = it_config_commit(cfg);
1898 STMF_STALE(ret);
1899 }
1900
1901 it_config_free(cfg);
1902
1903 return (ret);
1904 }
1905
1906 static int
1907 list_defaults(boolean_t script)
1908 {
1909 int ret;
1910 it_config_t *cfg;
1911 nvlist_t *nvl;
1912 char *alias = "<none>";
1913 char *auth = "<none>";
1914 char *isns = "disabled";
1915 char **isvrs = NULL;
1916 uint32_t scount = 0;
1917 char *rsvr = "<none>";
1918 char *rsecret = "unset";
1919 boolean_t val = B_FALSE;
1920 int i;
1921 char *sec = "solaris.smf.read.stmf";
1922
1923 ITADM_CHKAUTH(sec);
1924
1925 ret = it_config_load(&cfg);
1926 if (ret != 0) {
1927 output_config_error(ret,
1928 gettext("Error retrieving iSCSI target configuration"));
1929 return (ret);
1930 }
1931
1932 nvl = cfg->config_global_properties;
1933
1934 /* look up all possible options */
1935 (void) nvlist_lookup_string(nvl, "alias", &alias);
1936 (void) nvlist_lookup_string(nvl, "auth", &auth);
1937 (void) nvlist_lookup_boolean_value(nvl, "isns", &val);
1938 if (val == B_TRUE) {
1939 isns = "enabled";
1940 }
1941 (void) nvlist_lookup_string_array(nvl, "isnsserver", &isvrs,
1942 &scount);
1943 (void) nvlist_lookup_string(nvl, "radiusserver", &rsvr);
1944 if (nvlist_exists(nvl, "radiussecret")) {
1945 rsecret = "set";
1946 }
1947
1948 if (!script) {
1949 (void) printf("%s:\n\n",
1950 gettext("iSCSI Target Default Properties"));
1951 }
1952
1953 if (script) {
1954 (void) printf("%s\t%s\t%s\t%s\t%s\t",
1955 alias, auth, rsvr, rsecret, isns);
1956 } else {
1957 (void) printf("%-15s\t%s\n%-15s\t%s\n%-15s\t%s\n%-15s\t%s\n"
1958 "%-15s\t%s\n%-15s\t",
1959 "alias:", alias, "auth:", auth, "radiusserver:",
1960 rsvr, "radiussecret:", rsecret, "isns:", isns,
1961 "isnsserver:");
1962 }
1963
1964 for (i = 0; i < scount; i++) {
1965 if (!isvrs || !isvrs[i]) {
1966 break;
1967 }
1968 if (i > 0) {
1969 (void) printf(",");
1970 }
1971 (void) printf("%s", isvrs[i]);
1972 }
1973
1974 if (i == 0) {
1975 (void) printf("%s", "<none>");
1976 }
1977
1978 (void) printf("\n");
1979
1980 it_config_free(cfg);
1981
1982 return (0);
1983 }
1984
1985 static int
1986 itadm_get_password(nvlist_t *nvl, char *key, char *passfile,
1987 char *phrase)
1988 {
1989 int ret = 0;
1990 char *pass;
1991 char buf[1024];
1992 int fd;
1993 struct stat64 sbuf;
1994 size_t rd;
1995
1996 if (!nvl || !key) {
1997 return (EINVAL);
1998 }
1999
2000 if (passfile) {
2001 ret = stat64(passfile, &sbuf);
2002 if ((ret != 0) || (!S_ISREG(sbuf.st_mode))) {
2003 (void) fprintf(stderr,
2004 gettext("Invalid secret file %s"),
2005 passfile);
2006 (void) fprintf(stderr, "\n");
2007 return (EBADF);
2008 }
2009
2010 fd = open64(passfile, O_RDONLY);
2011 if (fd == -1) {
2012 ret = errno;
2013 (void) fprintf(stderr,
2014 gettext("Could not open secret file %s: "),
2015 passfile);
2016 output_config_error(ret, NULL);
2017 return (ret);
2018 }
2019
2020 rd = read(fd, buf, sbuf.st_size);
2021 (void) close(fd);
2022
2023 if (rd != sbuf.st_size) {
2024 ret = EIO;
2025 (void) fprintf(stderr,
2026 gettext("Could not read secret file %s: "),
2027 passfile);
2028 output_config_error(ret, NULL);
2029 return (ret);
2030 }
2031
2032 /* ensure buf is properly terminated */
2033 buf[rd] = '\0';
2034
2035 /* if last char is a newline, strip it off */
2036 if (buf[rd - 1] == '\n') {
2037 buf[rd - 1] = '\0';
2038 }
2039
2040 /* validate length */
2041 if ((strlen(buf) > 255) || (strlen(buf) < 12)) {
2042 (void) fprintf(stderr, "%s\n",
2043 gettext(
2044 "Secret must be between 12 and 255 characters"));
2045 return (EINVAL);
2046 }
2047 } else {
2048 /* prompt for secret */
2049 if (!phrase) {
2050 return (EINVAL);
2051 }
2052
2053 pass = getpassphrase(phrase);
2054 if (!pass) {
2055 ret = errno;
2056 output_config_error(ret,
2057 gettext("Could not read secret"));
2058 return (ret);
2059 }
2060
2061 /* validate length */
2062 if ((strlen(pass) > 255) || (strlen(pass) < 12)) {
2063 (void) fprintf(stderr, "%s\n",
2064 gettext(
2065 "Secret must be between 12 and 255 characters"));
2066 return (EINVAL);
2067 }
2068
2069 (void) strlcpy(buf, pass, sizeof (buf));
2070
2071 /* confirm entered secret */
2072 pass = getpassphrase(gettext("Re-enter secret: "));
2073 if (!pass) {
2074 ret = errno;
2075 output_config_error(ret,
2076 gettext("Could not read secret"));
2077 return (ret);
2078 }
2079
2080 if (strcmp(buf, pass) != 0) {
2081 ret = EINVAL;
2082 (void) fprintf(stderr, "%s\n",
2083 gettext("Secret validation failed"));
2084 return (ret);
2085 }
2086
2087 }
2088
2089 ret = nvlist_add_string(nvl, key, buf);
2090
2091 return (ret);
2092 }
2093
2094 static int
2095 itadm_opt_to_arr(nvlist_t *nvl, char *key, char *opt, uint32_t *num)
2096 {
2097 int count;
2098 char *bufp;
2099 char **arr;
2100
2101 if (!opt || !key || !nvl) {
2102 return (EINVAL);
2103 }
2104
2105 bufp = opt;
2106 count = 1;
2107
2108 for (;;) {
2109 bufp = strchr(bufp, ',');
2110 if (!bufp) {
2111 break;
2112 }
2113 bufp++;
2114 count++;
2115 }
2116
2117 arr = calloc(count, sizeof (char *));
2118 if (!arr) {
2119 return (ENOMEM);
2120 }
2121
2122 bufp = opt;
2123 /* set delimiter to comma */
2124 (void) bufsplit(",", 0, NULL);
2125
2126 /* split up that buf! */
2127 (void) bufsplit(bufp, count, arr);
2128
2129 /* if requested, return the number of array members found */
2130 if (num) {
2131 *num = count;
2132 }
2133
2134 return (nvlist_add_string_array(nvl, key, arr, count));
2135 }
2136
2137 static void
2138 tag_name_to_num(char *tagname, uint16_t *tagnum)
2139 {
2140 ulong_t id;
2141 char *ptr = NULL;
2142
2143 if (!tagname || !tagnum) {
2144 return;
2145 }
2146
2147 *tagnum = 0;
2148
2149 id = strtoul(tagname, &ptr, 10);
2150
2151 /* Must be entirely numeric and in-range */
2152 if (ptr && (*ptr != '\0')) {
2153 return;
2154 }
2155
2156 if ((id <= UINT16_MAX) && (id > 1)) {
2157 *tagnum = (uint16_t)id;
2158 }
2159 }
2160
2161 /*
2162 * Print error messages to stderr for errnos and expected stmf errors.
2163 * This function should generally not be used for cases where the
2164 * calling code can generate a more detailed error message based on
2165 * the contextual knowledge of the meaning of specific errors.
2166 */
2167 static void
2168 output_config_error(int error, char *msg)
2169 {
2170
2171 if (msg) {
2172 (void) fprintf(stderr, "%s: ", msg);
2173 }
2174
2175 if (error & STMF_STATUS_ERROR) {
2176 switch (error) {
2177 case STMF_ERROR_PERM:
2178 (void) fprintf(stderr, "%s",
2179 gettext("permission denied"));
2180 break;
2181 case STMF_ERROR_BUSY:
2182 (void) fprintf(stderr, "%s",
2183 gettext("resource busy"));
2184 break;
2185 case STMF_ERROR_NOMEM:
2186 (void) fprintf(stderr, "%s",
2187 gettext("out of memory"));
2188 break;
2189 case STMF_ERROR_SERVICE_NOT_FOUND:
2190 (void) fprintf(stderr, "%s",
2191 gettext("STMF service not found"));
2192 break;
2193 case STMF_ERROR_SERVICE_DATA_VERSION:
2194 (void) fprintf(stderr, "%s",
2195 gettext("STMF service version incorrect"));
2196 break;
2197 case STMF_ERROR_PROV_DATA_STALE:
2198 (void) fprintf(stderr, "%s",
2199 gettext("Configuration changed during processing. "
2200 "Check the configuration, then retry this "
2201 "command if appropriate."));
2202 break;
2203 default:
2204 (void) fprintf(stderr, "%s", gettext("unknown error"));
2205 break;
2206 }
2207 } else {
2208 char buf[80] = "";
2209
2210 (void) strerror_r(error, buf, sizeof (buf));
2211 (void) fprintf(stderr, "%s", buf);
2212 }
2213
2214 (void) fprintf(stderr, "\n");
2215 }