Multiple user auth for ipxe menu - possible?

[mcb30]

(2014-06-14 19:16)bunoc Wrote:  :test01
login || goto start
iseq ${username} testuser || goto start
iseq ${password} testpass || goto start
(and then moves on to sanhook stuff)

I use this to enforce user/pass authentication before proceeding to a sanhook statement. This is to ensure only a given user can access a given iscsi lun. So far so good, everything works as intended.

It's generally not a good idea to perform authentication entirely on the client side. There's nothing preventing a random user from downloading your iPXE script and thus obtaining the entire username and password list.

iSCSI does support optional authentication via CHAP. You can use this to ensure that the iSCSI target will refuse to allow a connection without the correct username and password.

Michael