xref: /illumos-gate/usr/src/uts/common/io/scsi/adapters/iscsi/iscsi.c (revision 61dfa509)

/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright 2000 by Cisco Systems, Inc.  All rights reserved.
 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
 * Copyright 2015 Nexenta Systems, Inc.  All rights reserved.
 * Copyright 2019 Joshua M. Clulow <josh@sysmgr.org>
 *
 * iSCSI Software Initiator
 */

/*
 * Framework interface routines for iSCSI
 */

#include "iscsi.h"				/* main header */
#include <sys/iscsi_protocol.h>	/* protocol structs */
#include <sys/scsi/adapters/iscsi_if.h>		/* ioctl interfaces */
#include "iscsi_targetparam.h"
#include "persistent.h"
#include <sys/scsi/adapters/iscsi_door.h>
#include <sys/dlpi.h>
#include <sys/utsname.h>
#include "isns_client.h"
#include "isns_protocol.h"
#include <sys/bootprops.h>
#include <sys/types.h>
#include <sys/bootconf.h>

#define	ISCSI_NAME_VERSION	"iSCSI Initiator v-1.55"

#define	MAX_GET_NAME_SIZE	1024
#define	MAX_NAME_PROP_SIZE	256
#define	UNDEFINED		-1
#define	ISCSI_DISC_DELAY	2	/* seconds */

/*
 * +--------------------------------------------------------------------+
 * | iscsi globals                                                      |
 * +--------------------------------------------------------------------+
 */
void		*iscsi_state;
kmutex_t	iscsi_oid_mutex;
uint32_t	iscsi_oid;
int		iscsi_nop_delay		= ISCSI_DEFAULT_NOP_DELAY;
int		iscsi_rx_window		= ISCSI_DEFAULT_RX_WINDOW;
int		iscsi_rx_max_window	= ISCSI_DEFAULT_RX_MAX_WINDOW;
boolean_t	iscsi_logging		= B_FALSE;

extern ib_boot_prop_t	*iscsiboot_prop;
extern int		modrootloaded;
extern struct bootobj	rootfs;

/*
 * +--------------------------------------------------------------------+
 * | iscsi.c prototypes							|
 * +--------------------------------------------------------------------+
 */
static int iscsi_getinfo(dev_info_t *dip, ddi_info_cmd_t infocmd,
    void *arg, void **result);
static int iscsi_attach(dev_info_t *dip, ddi_attach_cmd_t cmd);
static int iscsi_detach(dev_info_t *dip, ddi_detach_cmd_t cmd);

/* scsi_tran prototypes */
static int iscsi_tran_lun_init(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd);
static int iscsi_tran_lun_probe(struct scsi_device *sd, int (*callback) ());
static struct scsi_pkt *iscsi_tran_init_pkt(struct scsi_address *ap,
    struct scsi_pkt *pkt, struct buf *bp, int cmdlen, int statuslen,
    int tgtlen, int flags, int (*callback) (), caddr_t arg);
static void iscsi_tran_lun_free(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd);
static int iscsi_tran_start(struct scsi_address *ap, struct scsi_pkt *pkt);
static int iscsi_tran_abort(struct scsi_address *ap, struct scsi_pkt *pkt);
static int iscsi_tran_reset(struct scsi_address *ap, int level);
static int iscsi_tran_getcap(struct scsi_address *ap, char *cap, int whom);
static int iscsi_tran_setcap(struct scsi_address *ap, char *cap,
    int value, int whom);
static void iscsi_tran_destroy_pkt(struct scsi_address *ap,
    struct scsi_pkt *pkt);
static void iscsi_tran_dmafree(struct scsi_address *ap,
    struct scsi_pkt *pkt);
static void iscsi_tran_sync_pkt(struct scsi_address *ap,
    struct scsi_pkt *pkt);
static void iscsi_tran_sync_pkt(struct scsi_address *ap,
    struct scsi_pkt *pkt);
static int iscsi_tran_reset_notify(struct scsi_address *ap, int flag,
    void (*callback) (caddr_t), caddr_t arg);
static int iscsi_tran_bus_config(dev_info_t *parent, uint_t flags,
    ddi_bus_config_op_t op, void *arg, dev_info_t **childp);
static int iscsi_tran_bus_unconfig(dev_info_t *parent, uint_t flags,
    ddi_bus_config_op_t op, void *arg);
static int iscsi_tran_get_name(struct scsi_device *sd, char *name, int len);
static int iscsi_tran_get_bus_addr(struct scsi_device *sd, char *name, int len);

/* bus_ops prototypes */
/* LINTED E_STATIC_UNUSED */
static ddi_intrspec_t iscsi_get_intrspec(dev_info_t *dip, dev_info_t *rdip,
    uint_t inumber);
/* LINTED E_STATIC_UNUSED */
static int iscsi_add_intrspec(dev_info_t *dip, dev_info_t *rdip,
    ddi_intrspec_t intrspec, ddi_iblock_cookie_t *iblock_cookiep,
    ddi_idevice_cookie_t *idevice_cookiep, uint_t (*int_handler)(caddr_t
    int_handler_arg), caddr_t int_handler_arg, int kind);
/* LINTED E_STATIC_UNUSED */
static void iscsi_remove_intrspec(dev_info_t *dip, dev_info_t *rdip,
    ddi_intrspec_t intrspec, ddi_iblock_cookie_t iblock_cookie);
/* LINTED E_STATIC_UNUSED */
static int iscsi_ctl(dev_info_t *dip, dev_info_t *rdip, ddi_ctl_enum_t ctlop,
    void *arg, void *result);

/* cb_ops prototypes */
static int iscsi_open(dev_t *devp, int flags, int otyp, cred_t *credp);
static int iscsi_close(dev_t dev, int flag, int otyp, cred_t *credp);
static int iscsi_ioctl(dev_t dev, int cmd, intptr_t arg, int mode,
    cred_t *credp, int *rvalp);

int iscsi_get_persisted_param(uchar_t *name,
    iscsi_param_get_t *ipgp,
    iscsi_login_params_t *params);
static void iscsi_override_target_default(iscsi_hba_t *ihp,
    iscsi_param_get_t *ipg);

/* scsi_tran helpers */
static int iscsi_virt_lun_init(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd);
static int iscsi_phys_lun_init(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd);
static int iscsi_i_commoncap(struct scsi_address *ap, char *cap,
    int val, int lunonly, int doset);
static void iscsi_get_name_to_iqn(char *name, int name_max_len);
static void iscsi_get_name_from_iqn(char *name, int name_max_len);
static boolean_t iscsi_cmp_boot_sess_oid(iscsi_hba_t *ihp, uint32_t oid);

/* iscsi initiator service helpers */
static boolean_t iscsi_enter_service_zone(iscsi_hba_t *ihp, uint32_t status);
static void iscsi_exit_service_zone(iscsi_hba_t *ihp, uint32_t status);
static void iscsi_check_miniroot(iscsi_hba_t *ihp);
static void iscsi_get_tunable_default(iscsi_tunable_object_t *param);
static int iscsi_get_persisted_tunable_param(uchar_t *name,
    iscsi_tunable_object_t *tpsg);
static void iscsi_set_default_tunable_params(iscsi_tunable_params_t *params);

/* struct helpers prototypes */

/*
 * At this point this driver doesn't need this structure because nothing
 * is done during the open, close or ioctl. Code put in place because
 * some admin related work might be done in the ioctl routine.
 */
static struct cb_ops iscsi_cb_ops = {
	iscsi_open,			/* open */
	iscsi_close,			/* close */
	nodev,				/* strategy */
	nodev,				/* print */
	nodev,				/* dump */
	nodev,				/* read */
	nodev,				/* write */
	iscsi_ioctl,			/* ioctl */
	nodev,				/* devmap */
	nodev,				/* mmap */
	nodev,				/* segmap */
	nochpoll,			/* poll */
	ddi_prop_op,			/* prop_op */
	NULL,				/* streamtab */
	D_NEW | D_MP | D_HOTPLUG,	/* flags */
	CB_REV,				/* cb_rev */
	nodev,				/* aread */
	nodev,				/* awrite */
};

static struct dev_ops iscsi_dev_ops = {
	DEVO_REV,		/* devo_rev */
	0,			/* refcnt */
	iscsi_getinfo,		/* getinfo */
	nulldev,		/* identify */
	nulldev,		/* probe */
	iscsi_attach,		/* attach */
	iscsi_detach,		/* detach */
	nodev,			/* reset */
	&iscsi_cb_ops,		/* driver operations */
	NULL,			/* bus ops */
	NULL,			/* power management */
	ddi_quiesce_not_needed,	/* quiesce */
};

static struct modldrv modldrv = {
	&mod_driverops,		/* drv_modops */
	ISCSI_NAME_VERSION,	/* drv_linkinfo */
	&iscsi_dev_ops		/* drv_dev_ops */
};

static struct modlinkage modlinkage = {
	MODREV_1,		/* ml_rev */
	&modldrv,		/* ml_linkage[] */
	NULL			/* NULL termination */
};

/*
 * This structure is bogus. scsi_hba_attach_setup() requires, as in the kernel
 * will panic if you don't pass this in to the routine, this information.
 * Need to determine what the actual impact to the system is by providing
 * this information if any. Since dma allocation is done in pkt_init it may
 * not have any impact. These values are straight from the Writing Device
 * Driver manual.
 */
static ddi_dma_attr_t iscsi_dma_attr = {
	DMA_ATTR_V0,	/* ddi_dma_attr version */
	0,		/* low address */
	0xffffffff,	/* high address */
	0x00ffffff,	/* counter upper bound */
	1,		/* alignment requirements */
	0x3f,		/* burst sizes */
	1,		/* minimum DMA access */
	0xffffffff,	/* maximum DMA access */
	(1 << 24) - 1,	/* segment boundary restrictions */
	1,		/* scater/gather list length */
	512,		/* device granularity */
	0		/* DMA flags */
};

/*
 * _init - General driver init entry
 */
int
_init(void)
{
	int rval = 0;

	iscsi_net_init();

	mutex_init(&iscsi_oid_mutex, NULL, MUTEX_DRIVER, NULL);
	iscsi_oid = ISCSI_INITIATOR_OID;

	/*
	 * Set up the soft state structures. If this driver is actually
	 * being attached to the system then we'll have at least one
	 * HBA/NIC used.
	 */
	rval = ddi_soft_state_init(&iscsi_state,
	    sizeof (iscsi_hba_t), 1);
	if (rval != 0) {
		iscsi_net_fini();
		goto init_done;
	}

	rval = scsi_hba_init(&modlinkage);
	if (rval != 0) {
		ddi_soft_state_fini(&iscsi_state);
		iscsi_net_fini();
		goto init_done;
	}

	rval = mod_install(&modlinkage);
	if (rval != 0) {
		ddi_soft_state_fini(&iscsi_state);
		scsi_hba_fini(&modlinkage);
		iscsi_net_fini();
		goto init_done;
	}
	(void) iscsi_door_ini();

init_done:
	return (rval);
}

/*
 * _fini - General driver destructor entry
 */
int
_fini(void)
{
	int rval = 0;

	rval = mod_remove(&modlinkage);
	if (rval == 0) {
		scsi_hba_fini(&modlinkage);
		ddi_soft_state_fini(&iscsi_state);
		mutex_destroy(&iscsi_oid_mutex);
		(void) iscsi_door_term();
		iscsi_net_fini();
	}
	return (rval);
}

/*
 * _info - General driver info entry
 */
int
_info(struct modinfo *mp)
{
	int rval = 0;

	rval = mod_info(&modlinkage, mp);

	return (rval);
}


/*
 * +--------------------------------------------------------------------+
 * | Start of dev_ops routines					  |
 * +--------------------------------------------------------------------+
 */

/*
 * iscsi_getinfo - returns general driver information
 */
/* ARGSUSED */
static int
iscsi_getinfo(dev_info_t *dip, ddi_info_cmd_t infocmd,
    void *arg, void **result)
{
	int		rval		= DDI_SUCCESS;
	int		instance	= getminor((dev_t)arg);
	iscsi_hba_t	*ip;

	switch (infocmd) {
	case DDI_INFO_DEVT2DEVINFO:
		if ((ip = ddi_get_soft_state(iscsi_state, instance)) == NULL) {
			return (DDI_FAILURE);
		}
		*result = ip->hba_dip;
		if (ip->hba_dip == NULL)
			rval = DDI_FAILURE;
		else
			rval = DDI_SUCCESS;
		break;

	case DDI_INFO_DEVT2INSTANCE:
		*result = (void *)(uintptr_t)instance;
		rval = DDI_SUCCESS;
		break;

	default:
		rval = DDI_FAILURE;
		break;
	}
	return (rval);
}


/*
 * iscsi_attach -- Attach instance of an iSCSI HBA.  We
 * will attempt to create our HBA and register it with
 * scsi_vhci.  If it's not possible to create the HBA
 * or register with vhci we will fail the attach.
 */
static int
iscsi_attach(dev_info_t *dip, ddi_attach_cmd_t cmd)
{
	int			instance	= ddi_get_instance(dip);
	iscsi_hba_t		*ihp		= NULL;
	scsi_hba_tran_t		*tran		= NULL;
	char			init_port_name[MAX_NAME_PROP_SIZE];

	if (cmd == DDI_RESUME) {
		return (DDI_SUCCESS);
	} else if (cmd != DDI_ATTACH) {
		return (DDI_FAILURE);
	}

	if (!modrootloaded && iscsiboot_prop == NULL) {
		/*
		 * The root file system has not yet been mounted, and we're not
		 * trying to boot from an iSCSI device.  Fail to attach now so
		 * that we can retry after root has been mounted.
		 */
		return (DDI_FAILURE);
	}

	/* create iSCSI HBA devctl device node */
	if (ddi_create_minor_node(dip, ISCSI_DEVCTL, S_IFCHR, 0,
	    DDI_PSEUDO, 0) != DDI_SUCCESS) {
		goto iscsi_attach_failed3;
	}

	/* allocate HBA soft state */
	if (ddi_soft_state_zalloc(iscsi_state, instance) !=
	    DDI_SUCCESS) {
		ddi_remove_minor_node(dip, NULL);
		goto iscsi_attach_failed3;
	}

	/* get reference to soft state */
	if ((ihp = (iscsi_hba_t *)ddi_get_soft_state(
	    iscsi_state, instance)) == NULL) {
		ddi_remove_minor_node(dip, NULL);
		ddi_soft_state_free(iscsi_state, instance);
		goto iscsi_attach_failed3;
	}

	/* init HBA mutex used to protect discovery events */
	mutex_init(&ihp->hba_discovery_events_mutex, NULL,
	    MUTEX_DRIVER, NULL);

	VERIFY0(ldi_ident_from_dip(dip, &ihp->hba_li));

	/* init HBA mutex used to protect service status */
	mutex_init(&ihp->hba_service_lock, NULL,
	    MUTEX_DRIVER, NULL);
	cv_init(&ihp->hba_service_cv, NULL, CV_DRIVER, NULL);

	/*
	 * init SendTargets semaphore that is used to allow
	 * only one operation at a time
	 */
	sema_init(&ihp->hba_sendtgts_semaphore, 1, NULL,
	    SEMA_DRIVER, NULL);

	ihp->hba_sess_list = NULL;
	rw_init(&ihp->hba_sess_list_rwlock, NULL,
	    RW_DRIVER, NULL);

	/* allocate scsi_hba_tran */
	if ((tran = scsi_hba_tran_alloc(dip, SCSI_HBA_CANSLEEP))
	    == NULL) {
		ddi_remove_minor_node(dip, NULL);
		goto iscsi_attach_failed2;
	}

	/* soft state setup */
	ihp->hba_sig	= ISCSI_SIG_HBA;
	ihp->hba_tran	= tran;
	ihp->hba_dip	= dip;
	if (iscsiboot_prop == NULL) {
		ihp->hba_service_status =
		    ISCSI_SERVICE_DISABLED;
		ihp->hba_service_status_overwrite = B_FALSE;
	} else {
		ihp->hba_service_status =
		    ISCSI_SERVICE_ENABLED;
		ihp->hba_service_status_overwrite = B_TRUE;
	}
	ihp->hba_service_client_count = 0;

	mutex_enter(&iscsi_oid_mutex);
	ihp->hba_oid		  = iscsi_oid++;
	mutex_exit(&iscsi_oid_mutex);

	ihp->hba_name[0]	  = '\0';
	ihp->hba_name_length	  = 0;
	ihp->hba_alias_length	  = 0;
	ihp->hba_alias[0]	  = '\0';

	iscsi_net->tweaks.rcvbuf = ddi_prop_get_int(
	    DDI_DEV_T_ANY, ihp->hba_dip, 0, "so-rcvbuf",
	    ISCSI_SOCKET_RCVBUF_SIZE);

	iscsi_net->tweaks.sndbuf = ddi_prop_get_int(
	    DDI_DEV_T_ANY, ihp->hba_dip, 0, "so-sndbuf",
	    ISCSI_SOCKET_SNDBUF_SIZE);

	iscsi_net->tweaks.nodelay = ddi_prop_get_int(
	    DDI_DEV_T_ANY, ihp->hba_dip, 0, "tcp-nodelay",
	    ISCSI_TCP_NODELAY_DEFAULT);

	iscsi_net->tweaks.conn_notify_threshold =
	    ddi_prop_get_int(DDI_DEV_T_ANY,
	    ihp->hba_dip, 0, "tcp-conn-notify-threshold",
	    ISCSI_TCP_CNOTIFY_THRESHOLD_DEFAULT);

	iscsi_net->tweaks.conn_abort_threshold =
	    ddi_prop_get_int(DDI_DEV_T_ANY, ihp->hba_dip,
	    0, "tcp-conn-abort-threshold",
	    ISCSI_TCP_CABORT_THRESHOLD_DEFAULT);

	iscsi_net->tweaks.abort_threshold = ddi_prop_get_int(
	    DDI_DEV_T_ANY, ihp->hba_dip, 0,
	    "tcp-abort-threshold",
	    ISCSI_TCP_ABORT_THRESHOLD_DEFAULT);

	ihp->hba_config_storm_delay = ddi_prop_get_int(
	    DDI_DEV_T_ANY, ihp->hba_dip, 0,
	    "config-storm-delay",
	    ISCSI_CONFIG_STORM_DELAY_DEFAULT);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "so-rcvbuf", iscsi_net->tweaks.rcvbuf);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "so-sndbuf", iscsi_net->tweaks.sndbuf);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "tcp-nodelay", iscsi_net->tweaks.nodelay);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "tcp-conn-notify-threshold",
	    iscsi_net->tweaks.conn_notify_threshold);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "tcp-conn-abort-threshold",
	    iscsi_net->tweaks.conn_abort_threshold);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "tcp-abort-threshold",
	    iscsi_net->tweaks.abort_threshold);

	(void) ddi_prop_update_int(DDI_DEV_T_NONE, ihp->hba_dip,
	    "config-storm-delay",
	    ihp->hba_config_storm_delay);

	/* setup hba defaults */
	iscsi_set_default_login_params(&ihp->hba_params);
	iscsi_set_default_tunable_params(
	    &ihp->hba_tunable_params);

	/* setup minimal initiator params */
	iscsid_set_default_initiator_node_settings(ihp, B_TRUE);

	/* hba set up */
	tran->tran_hba_private  = ihp;
	tran->tran_tgt_private  = NULL;
	tran->tran_tgt_init	= iscsi_tran_lun_init;
	tran->tran_tgt_probe	= iscsi_tran_lun_probe;
	tran->tran_tgt_free	= iscsi_tran_lun_free;
	tran->tran_start	= iscsi_tran_start;
	tran->tran_abort	= iscsi_tran_abort;
	tran->tran_reset	= iscsi_tran_reset;
	tran->tran_getcap	= iscsi_tran_getcap;
	tran->tran_setcap	= iscsi_tran_setcap;
	tran->tran_init_pkt	= iscsi_tran_init_pkt;
	tran->tran_destroy_pkt	= iscsi_tran_destroy_pkt;
	tran->tran_dmafree	= iscsi_tran_dmafree;
	tran->tran_sync_pkt	= iscsi_tran_sync_pkt;
	tran->tran_reset_notify	= iscsi_tran_reset_notify;
	tran->tran_bus_config	= iscsi_tran_bus_config;
	tran->tran_bus_unconfig	= iscsi_tran_bus_unconfig;

	tran->tran_get_name	= iscsi_tran_get_name;
	tran->tran_get_bus_addr	= iscsi_tran_get_bus_addr;
	tran->tran_interconnect_type = INTERCONNECT_ISCSI;

	/* register scsi hba with scsa */
	if (scsi_hba_attach_setup(dip, &iscsi_dma_attr,
	    tran, SCSI_HBA_TRAN_CLONE) != DDI_SUCCESS) {
		goto iscsi_attach_failed1;
	}

	/* register scsi hba with mdi (MPxIO/vhci) */
	if (mdi_phci_register(MDI_HCI_CLASS_SCSI, dip, 0) !=
	    MDI_SUCCESS) {
		ihp->hba_mpxio_enabled = B_FALSE;
	} else {
		ihp->hba_mpxio_enabled = B_TRUE;
	}

	(void) iscsi_hba_kstat_init(ihp);

	/* Initialize targetparam list */
	iscsi_targetparam_init();

	/* Initialize ISID */
	ihp->hba_isid[0] = ISCSI_SUN_ISID_0;
	ihp->hba_isid[1] = ISCSI_SUN_ISID_1;
	ihp->hba_isid[2] = ISCSI_SUN_ISID_2;
	ihp->hba_isid[3] = ISCSI_SUN_ISID_3;
	ihp->hba_isid[4] = ISCSI_SUN_ISID_4;
	ihp->hba_isid[5] = ISCSI_SUN_ISID_5;

	/* Setup iSNS transport services and client */
	isns_client_init();

	/*
	 * initialize persistent store,
	 * or boot target info in case of iscsi boot
	 */
	ihp->hba_persistent_loaded = B_FALSE;
	if (iscsid_init(ihp) == B_FALSE) {
		goto iscsi_attach_failed0;
	}

	/* Setup init_port_name for MPAPI */
	(void) snprintf(init_port_name, MAX_NAME_PROP_SIZE,
	    "%s,%02x%02x%02x%02x%02x%02x",
	    (char *)ihp->hba_name, ihp->hba_isid[0],
	    ihp->hba_isid[1], ihp->hba_isid[2],
	    ihp->hba_isid[3], ihp->hba_isid[4],
	    ihp->hba_isid[5]);

	if (ddi_prop_update_string(DDI_DEV_T_NONE, dip,
	    SCSI_ADDR_PROP_INITIATOR_PORT, init_port_name) !=
	    DDI_PROP_SUCCESS) {
		cmn_err(CE_WARN, "iscsi_attach: Creating "
		    SCSI_ADDR_PROP_INITIATOR_PORT
		    " property on iSCSI "
		    "HBA(%s) with dip(%d) Failed",
		    (char *)ihp->hba_name,
		    ddi_get_instance(dip));
	}

	ddi_report_dev(dip);
	return (DDI_SUCCESS);

iscsi_attach_failed0:
	isns_client_cleanup();
	if (ihp->stats.ks) {
		(void) iscsi_hba_kstat_term(ihp);
	}
	if (ihp->hba_mpxio_enabled == B_TRUE) {
		(void) mdi_phci_unregister(dip, 0);
	}
	(void) scsi_hba_detach(ihp->hba_dip);
iscsi_attach_failed1:
	ddi_remove_minor_node(dip, NULL);
	ddi_prop_remove_all(ihp->hba_dip);
	scsi_hba_tran_free(tran);
iscsi_attach_failed2:
	cv_destroy(&ihp->hba_service_cv);
	mutex_destroy(&ihp->hba_service_lock);
	mutex_destroy(&ihp->hba_discovery_events_mutex);
	sema_destroy(&ihp->hba_sendtgts_semaphore);
	rw_destroy(&ihp->hba_sess_list_rwlock);
	ddi_soft_state_free(iscsi_state, instance);
iscsi_attach_failed3:
	cmn_err(CE_WARN, "iscsi driver unable to attach "
	    "hba instance %d", instance);
	return (DDI_FAILURE);
}

/*
 * iscsi_detach - called on unload of hba instance
 */
static int
iscsi_detach(dev_info_t *dip, ddi_detach_cmd_t cmd)
{
	int			rval		= DDI_SUCCESS;
	scsi_hba_tran_t		*tran		= NULL;
	iscsi_hba_t		*ihp		= NULL;
	iscsi_hba_t		*ihp_check	= NULL;
	int			instance;
	char			*init_node_name;

	instance = ddi_get_instance(dip);

	switch (cmd) {
	case DDI_DETACH:
		if (!(tran = (scsi_hba_tran_t *)ddi_get_driver_private(dip))) {
			rval = DDI_SUCCESS;
			break;
		}

		if ((ihp = (iscsi_hba_t *)tran->tran_hba_private) == NULL) {
			rval =  DDI_FAILURE;
			break;
		}

		/*
		 * Validate that what is stored by the DDI framework is still
		 * the same state structure referenced by the SCSI framework
		 */
		ihp_check = ddi_get_soft_state(iscsi_state, instance);
		if (ihp_check != ihp) {
			rval = DDI_FAILURE;
			break;
		}

		/* If a session exists we can't safely detach */
		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		if (ihp->hba_sess_list != NULL) {
			rw_exit(&ihp->hba_sess_list_rwlock);
			rval = DDI_FAILURE;
			break;
		}
		rw_exit(&ihp->hba_sess_list_rwlock);

		/* Disable all discovery services */
		if (iscsid_disable_discovery(ihp,
		    ISCSI_ALL_DISCOVERY_METHODS) == B_FALSE) {
			/* Disable failed.  Fail detach */
			rval = DDI_FAILURE;
			break;
		}

		/* Deregister from iSNS server(s). */
		init_node_name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);
		if (persistent_initiator_name_get(init_node_name,
		    ISCSI_MAX_NAME_LEN) == B_TRUE) {
			if (strlen(init_node_name) > 0) {
				(void) isns_dereg(ihp->hba_isid,
				    (uint8_t *)init_node_name);
			}
		}
		kmem_free(init_node_name, ISCSI_MAX_NAME_LEN);
		init_node_name = NULL;

		/* Cleanup iSNS Client */
		isns_client_cleanup();

		iscsi_targetparam_cleanup();

		/* Cleanup iscsid resources */
		iscsid_fini();

		if (rval != DDI_SUCCESS) {
			break;
		}
		/* kstat hba. destroy */
		KSTAT_DEC_HBA_CNTR_SESS(ihp);

		if (ihp->hba_mpxio_enabled == B_TRUE) {
			(void) mdi_phci_unregister(dip, 0);
		}
		ddi_remove_minor_node(dip, NULL);

		ddi_prop_remove_all(ihp->hba_dip);

		ldi_ident_release(ihp->hba_li);

		cv_destroy(&ihp->hba_service_cv);
		mutex_destroy(&ihp->hba_service_lock);
		mutex_destroy(&ihp->hba_discovery_events_mutex);
		rw_destroy(&ihp->hba_sess_list_rwlock);
		(void) iscsi_hba_kstat_term(ihp);

		(void) scsi_hba_detach(dip);
		if (tran != NULL) {
			scsi_hba_tran_free(tran);
		}
		ddi_soft_state_free(iscsi_state, instance);
		break;
	default:
		break;
	}

	if (rval != DDI_SUCCESS) {
		cmn_err(CE_WARN, "iscsi driver unable to "
		    "detach hba instance %d", instance);
	}

	return (rval);
}

/*
 * +--------------------------------------------------------------------+
 * | End of dev_ops routines						|
 * +--------------------------------------------------------------------+
 */

/*
 * +--------------------------------------------------------------------+
 * | scsi_tran(9E) routines						|
 * +--------------------------------------------------------------------+
 */

/*
 * iscsi_tran_lun_init - Find target device based on SCSI device
 * Based on the information given (SCSI device, target dev_info) find
 * the target iSCSI device and put a pointer to that information in
 * the scsi_hba_tran_t structure.
 */
static int
iscsi_tran_lun_init(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd)
{
	int		rval	= 0;
	int		type	= 0;

	ASSERT(hba_tran->tran_hba_private != NULL);

	/*
	 * Child node is getting initialized.  Look at the mpxio component
	 * type on the child device to see if this device is mpxio managed
	 * or not.
	 */
	type = mdi_get_component_type(lun_dip);
	if (type != MDI_COMPONENT_CLIENT) {
		rval = iscsi_phys_lun_init(hba_dip, lun_dip, hba_tran, sd);
	} else {
		rval = iscsi_virt_lun_init(hba_dip, lun_dip, hba_tran, sd);
	}

	return (rval);
}

/*
 * iscsi_tran_lun_probe - This function didn't need to be implemented.
 * We could have left NULL in the tran table.  Since this isn't a
 * performance path this seems safe.  We are just wrappering the
 * function so we can see the call go through if we have debugging
 * enabled.
 */
static int
iscsi_tran_lun_probe(struct scsi_device *sd, int (*callback) ())
{
	int rval = 0;

	rval = scsi_hba_probe(sd, callback);

	return (rval);
}

/*
 * iscsi_init_pkt - Allocate SCSI packet and fill in required info.
 */
/* ARGSUSED */
static struct scsi_pkt *
iscsi_tran_init_pkt(struct scsi_address *ap, struct scsi_pkt *pkt,
    struct buf *bp, int cmdlen, int statuslen, int tgtlen, int flags,
    int (*callback) (), caddr_t arg)
{
	iscsi_lun_t *ilp;
	iscsi_cmd_t *icmdp;

	ASSERT(ap != NULL);
	ASSERT(callback == NULL_FUNC || callback == SLEEP_FUNC);

	/*
	 * The software stack doesn't have DMA which means the iSCSI
	 * protocol layer will be doing a bcopy from bp to outgoing
	 * streams buffers. Make sure that the buffer is mapped in
	 * so that the copy won't panic the system.
	 */
	if (bp && (bp->b_bcount != 0) &&
	    bp_mapin_common(bp, (callback == NULL_FUNC) ?
	    VM_NOSLEEP : VM_SLEEP) == NULL) {
		return (NULL);
	}

	ilp = (iscsi_lun_t *)ap->a_hba_tran->tran_tgt_private;
	ASSERT(ilp != NULL);

	if (pkt == NULL) {
		pkt = scsi_hba_pkt_alloc(ilp->lun_sess->sess_hba->hba_dip,
		    ap, cmdlen, statuslen, tgtlen, sizeof (iscsi_cmd_t),
		    callback, arg);
		if (pkt == NULL) {
			return (NULL);
		}
		icmdp = (iscsi_cmd_t *)pkt->pkt_ha_private;
		icmdp->cmd_sig			= ISCSI_SIG_CMD;
		icmdp->cmd_state		= ISCSI_CMD_STATE_FREE;
		icmdp->cmd_lun			= ilp;
		iscsi_lun_hold(ilp);
		icmdp->cmd_type			= ISCSI_CMD_TYPE_SCSI;
		/* add the report lun addressing type on to the lun */
		icmdp->cmd_un.scsi.lun		= ilp->lun_addr_type << 14;
		icmdp->cmd_un.scsi.lun		= icmdp->cmd_un.scsi.lun |
		    ilp->lun_num;
		icmdp->cmd_un.scsi.pkt		= pkt;
		icmdp->cmd_un.scsi.bp		= bp;
		icmdp->cmd_un.scsi.cmdlen	= cmdlen;
		icmdp->cmd_un.scsi.statuslen	= statuslen;
		icmdp->cmd_crc_error_seen	= B_FALSE;
		icmdp->cmd_misc_flags		= 0;
		if (flags & PKT_XARQ) {
			icmdp->cmd_misc_flags |= ISCSI_CMD_MISCFLAG_XARQ;
		}


		idm_sm_audit_init(&icmdp->cmd_state_audit);

		mutex_init(&icmdp->cmd_mutex, NULL, MUTEX_DRIVER, NULL);
		cv_init(&icmdp->cmd_completion, NULL, CV_DRIVER, NULL);

		pkt->pkt_address		= *ap;
		pkt->pkt_comp			= (void (*)())NULL;
		pkt->pkt_flags			= 0;
		pkt->pkt_time			= 0;
		pkt->pkt_resid			= 0;
		pkt->pkt_statistics		= 0;
		pkt->pkt_reason			= 0;
	}
	return (pkt);
}

/*
 * iscsi_tran_lun_free - Free a SCSI LUN
 */
static void
iscsi_tran_lun_free(dev_info_t *hba_dip, dev_info_t *lun_dip,
    scsi_hba_tran_t *hba_tran, struct scsi_device *sd)
{
	iscsi_lun_t *ilp = NULL;

	ASSERT(hba_dip != NULL);
	ASSERT(lun_dip != NULL);
	ASSERT(hba_tran != NULL);
	ASSERT(sd != NULL);
	ilp = (iscsi_lun_t *)hba_tran->tran_tgt_private;
	ASSERT(ilp != NULL);

	(void) mdi_prop_remove(ilp->lun_pip, NULL);
}

/*
 * iscsi_start -- Start a SCSI transaction based on the packet
 * This will attempt to add the icmdp to the pending queue
 * for the connection and kick the queue.  If the enqueue
 * fails that means the queue is full.
 */
static int
iscsi_tran_start(struct scsi_address *ap, struct scsi_pkt *pkt)
{
	iscsi_lun_t	*ilp		= NULL;
	iscsi_sess_t	*isp		= NULL;
	iscsi_cmd_t	*icmdp		= NULL;
	uint_t		flags;

	ASSERT(ap != NULL);
	ASSERT(pkt != NULL);
	ilp = (iscsi_lun_t *)ap->a_hba_tran->tran_tgt_private;
	isp = (iscsi_sess_t *)ilp->lun_sess;
	icmdp = (iscsi_cmd_t *)pkt->pkt_ha_private;
	flags = pkt->pkt_flags;
	ASSERT(ilp != NULL);
	ASSERT(isp != NULL);
	ASSERT(icmdp != NULL);

	/*
	 * If the session is in the FREE state then
	 * all connections are down and retries have
	 * been exhausted.  Fail command with fatal error.
	 */
	rw_enter(&isp->sess_state_rwlock, RW_READER);
	if (isp->sess_state == ISCSI_SESS_STATE_FREE) {
		rw_exit(&isp->sess_state_rwlock);
		return (TRAN_FATAL_ERROR);
	}

	/*
	 * If we haven't received data from the target in the
	 * max specified period something is wrong with the
	 * transport.  Fail IO with FATAL_ERROR.
	 */
	if (isp->sess_rx_lbolt + SEC_TO_TICK(iscsi_rx_max_window) <
	    ddi_get_lbolt()) {
		rw_exit(&isp->sess_state_rwlock);
		return (TRAN_FATAL_ERROR);
	}

	/*
	 * If the session is not in LOGGED_IN then we have
	 * no connections LOGGED_IN, but we haven't exhuasted
	 * our retries.  Fail the command with busy so the
	 * caller might try again later.  Once retries are
	 * exhausted the state machine will move us to FREE.
	 */
	if (isp->sess_state != ISCSI_SESS_STATE_LOGGED_IN) {
		rw_exit(&isp->sess_state_rwlock);
		return (TRAN_BUSY);
	}

	/*
	 * If we haven't received data from the target in the
	 * specified period something is probably wrong with
	 * the transport.  Just return back BUSY until either
	 * the problem is resolved of the transport fails.
	 */
	if (isp->sess_rx_lbolt + SEC_TO_TICK(iscsi_rx_window) <
	    ddi_get_lbolt()) {
		rw_exit(&isp->sess_state_rwlock);
		return (TRAN_BUSY);
	}


	/* reset cmd values in case upper level driver is retrying cmd */
	icmdp->cmd_prev = icmdp->cmd_next = NULL;
	icmdp->cmd_crc_error_seen = B_FALSE;
	icmdp->cmd_lbolt_pending = icmdp->cmd_lbolt_active =
	    icmdp->cmd_lbolt_aborting = icmdp->cmd_lbolt_timeout =
	    (clock_t)NULL;
	icmdp->cmd_itt = icmdp->cmd_ttt = 0;
	icmdp->cmd_un.scsi.abort_icmdp = NULL;

	mutex_enter(&isp->sess_queue_pending.mutex);
	iscsi_cmd_state_machine(icmdp, ISCSI_CMD_EVENT_E1, isp);
	mutex_exit(&isp->sess_queue_pending.mutex);
	rw_exit(&isp->sess_state_rwlock);

	/*
	 * If this packet doesn't have FLAG_NOINTR set, it could have
	 * already run to completion (and the memory freed) at this
	 * point, so check our local copy of pkt_flags.  Otherwise we
	 * have to wait for completion before returning to the caller.
	 */
	if (flags & FLAG_NOINTR) {
		mutex_enter(&icmdp->cmd_mutex);
		while ((icmdp->cmd_state != ISCSI_CMD_STATE_COMPLETED) ||
		    (icmdp->cmd_un.scsi.r2t_icmdp != NULL) ||
		    (icmdp->cmd_un.scsi.abort_icmdp != NULL) ||
		    (icmdp->cmd_un.scsi.r2t_more == B_TRUE)) {
			cv_wait(&icmdp->cmd_completion, &icmdp->cmd_mutex);
		}
		icmdp->cmd_state = ISCSI_CMD_STATE_FREE;
		mutex_exit(&icmdp->cmd_mutex);
	}

	return (TRAN_ACCEPT);
}

/*
 * iscsi_tran_abort - Called when an upper level application
 * or driver wants to kill a scsi_pkt that was already sent to
 * this driver.
 */
/* ARGSUSED */
static int
iscsi_tran_abort(struct scsi_address *ap, struct scsi_pkt *pkt)
{
	return (0);
}

/*
 * iscsi_tran_reset - Reset target at either BUS, TARGET, or LUN
 * level.  This will require the issuing of a task management
 * command down to the target/lun.
 */
static int
iscsi_tran_reset(struct scsi_address *ap, int level)
{
	int		rval    = ISCSI_STATUS_INTERNAL_ERROR;
	iscsi_sess_t	*isp    = NULL;
	iscsi_lun_t	*ilp    = NULL;

	ilp = (iscsi_lun_t *)ap->a_hba_tran->tran_tgt_private;
	ASSERT(ilp != NULL);
	isp = ilp->lun_sess;
	ASSERT(isp != NULL);

	switch (level) {
	case RESET_LUN:
		/* reset attempt will block until attempt is complete */
		rval = iscsi_handle_reset(isp, level, ilp);
		break;
	case RESET_BUS:
		/*
		 * What are we going to realy reset the ethernet
		 * network!?  Just fall through to a target reset.
		 */
	case RESET_TARGET:
		/* reset attempt will block until attempt is complete */
		rval = iscsi_handle_reset(isp, level, NULL);
		break;
	case RESET_ALL:
	default:
		break;
	}

	return (ISCSI_SUCCESS(rval) ? 1 : 0);
}

/*
 * iscsi_tran_getcap - Get target/lun capabilities.
 */
static int
iscsi_tran_getcap(struct scsi_address *ap, char *cap, int whom)
{
	return (iscsi_i_commoncap(ap, cap, 0, whom, 0));
}


/*
 * iscsi_tran_setcap - Set target/lun capabilities.
 */
/* ARGSUSED */
static int
iscsi_tran_setcap(struct scsi_address *ap, char *cap, int value, int whom)
{
	return (iscsi_i_commoncap(ap, cap, value, whom, 1));
}


/*
 * iscsi_tran_destroy_pkt - Clean up packet
 */
static void
iscsi_tran_destroy_pkt(struct scsi_address *ap, struct scsi_pkt *pkt)
{
	iscsi_cmd_t	*icmdp;

	icmdp = (iscsi_cmd_t *)pkt->pkt_ha_private;

	ASSERT(icmdp != NULL);
	ASSERT(icmdp->cmd_sig == ISCSI_SIG_CMD);
	ASSERT(icmdp->cmd_state == ISCSI_CMD_STATE_FREE);

	iscsi_lun_rele(icmdp->cmd_lun);
	mutex_destroy(&icmdp->cmd_mutex);
	cv_destroy(&icmdp->cmd_completion);
	scsi_hba_pkt_free(ap, pkt);
}

/*
 * iscsi_tran_dmafree - This is a software driver, NO DMA
 */
/* ARGSUSED */
static void
iscsi_tran_dmafree(struct scsi_address *ap, struct scsi_pkt *pkt)
{
	/*
	 * The iSCSI interface doesn't deal with DMA
	 */
}

/*
 * iscsi_tran_sync_pkt - This is a software driver, NO DMA
 */
/* ARGSUSED */
static void
iscsi_tran_sync_pkt(struct scsi_address *ap, struct scsi_pkt *pkt)
{
	/*
	 * The iSCSI interface doesn't deal with DMA
	 */
}

/*
 * iscsi_tran_reset_notify - We don't support BUS_RESET so there
 * is no point in support callback.
 */
/* ARGSUSED */
static int
iscsi_tran_reset_notify(struct scsi_address *ap, int flag,
    void (*callback) (caddr_t), caddr_t arg)
{

	/*
	 * We never do BUS_RESETS so allowing this call
	 * back to register has no point?
	 */
	return (DDI_SUCCESS);
}


/*
 * iscsi_tran_bus_config - on demand device configuration
 *
 * iscsi_tran_bus_config is called by the NDI layer at the completion
 * of a dev_node creation.  There are two primary cases defined in this
 * function.  The first is BUS_CONFIG_ALL.  In this case the NDI is trying
 * to identify that targets/luns are available configured at that point
 * in time.  It is safe to just complete the process succcessfully.  The
 * second case is a new case that was defined in S10 for devfs.  BUS_CONFIG_ONE
 * this is to help driver the top down discovery instead of bottom up.  If
 * we receive a BUS_CONFIG_ONE we should check to see if the <addr> exists
 * if so complete successfull processing.  Otherwise we should call the
 * deamon and see if we can plumb the <addr>.  If it is possible to plumb the
 * <addr> block until plumbing is complete.  In both cases of being able to
 * plumb <addr> or not continue with successfull processing.
 */
static int
iscsi_tran_bus_config(dev_info_t *parent, uint_t flags,
    ddi_bus_config_op_t op, void *arg, dev_info_t **childp)
{
	int		rval	= NDI_SUCCESS;
	iscsi_hba_t	*ihp	= NULL;
	int		iflags	= flags;
	char		*name	= NULL;
	char		*ptr	= NULL;
	boolean_t	config_root = B_FALSE;

	/* get reference to soft state */
	ihp = (iscsi_hba_t *)ddi_get_soft_state(iscsi_state,
	    ddi_get_instance(parent));
	if (ihp == NULL) {
		return (NDI_FAILURE);
	}

	iscsi_check_miniroot(ihp);
	if ((modrootloaded == 0) && (iscsiboot_prop != NULL)) {
		config_root = B_TRUE;
	}

	if (config_root == B_FALSE) {
		if (iscsi_client_request_service(ihp) == B_FALSE) {
			return (NDI_FAILURE);
		}
	}

	/* lock so only one config operation occrs */
	sema_p(&iscsid_config_semaphore);

	switch (op) {
	case BUS_CONFIG_ONE:
		/* parse target name out of name given */
		if ((ptr = strchr((char *)arg, '@')) == NULL) {
			rval = NDI_FAILURE;
			break;
		}
		ptr++;		/* move past '@' */
		name = kmem_zalloc(MAX_GET_NAME_SIZE, KM_SLEEP);
		(void) strncpy(name, ptr, MAX_GET_NAME_SIZE);
		/* We need to strip the LUN */
		if ((ptr = strchr(name, ',')) == NULL) {
			rval = NDI_FAILURE;
			kmem_free(name, MAX_GET_NAME_SIZE);
			name = NULL;
			break;
		}
		/* We also need to strip the 4 bytes of hex TPGT */
		ptr -= 4;
		if (ptr <= name) {
			rval = NDI_FAILURE;
			kmem_free(name, MAX_GET_NAME_SIZE);
			name = NULL;
			break;
		}
		*ptr = '\0';		/* NULL terminate */

		/* translate name back to original iSCSI name */
		iscsi_get_name_to_iqn(name, MAX_GET_NAME_SIZE);

		/* configure target, skip 4 byte ISID */
		iscsid_config_one(ihp, (name+4), B_TRUE);

		kmem_free(name, MAX_GET_NAME_SIZE);
		name = NULL;

		/*
		 * DDI group instructed us to use this flag.
		 */
		iflags |= NDI_MDI_FALLBACK;
		break;
	case BUS_CONFIG_DRIVER:
		/* FALLTHRU */
	case BUS_CONFIG_ALL:
		iscsid_config_all(ihp, B_TRUE);
		break;
	default:
		rval = NDI_FAILURE;
		break;
	}

	if (rval == NDI_SUCCESS) {
		rval = ndi_busop_bus_config(parent, iflags,
		    op, arg, childp, 0);
	}
	sema_v(&iscsid_config_semaphore);

	if (config_root == B_FALSE) {
		iscsi_client_release_service(ihp);
	}

	return (rval);
}

/*
 * iscsi_tran_bus_unconfig - on demand device unconfiguration
 *
 * Called by the os framework under low resource situations.
 * It will attempt to unload our minor nodes (logical units
 * ndi/mdi nodes).
 */
static int
iscsi_tran_bus_unconfig(dev_info_t *parent, uint_t flag,
    ddi_bus_config_op_t op, void *arg)
{
	int		rval = NDI_SUCCESS;
	iscsi_hba_t	*ihp = NULL;

	/* get reference to soft state */
	ihp = (iscsi_hba_t *)ddi_get_soft_state(iscsi_state,
	    ddi_get_instance(parent));
	if (ihp == NULL) {
		return (NDI_FAILURE);
	}

	if (iscsi_client_request_service(ihp) == B_FALSE) {
		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		if (ihp->hba_sess_list != NULL) {
			rval = NDI_FAILURE;
		}
		rw_exit(&ihp->hba_sess_list_rwlock);
		return (rval);
	}

	rval = ndi_busop_bus_unconfig(parent, flag, op, arg);

	iscsi_client_release_service(ihp);

	return (rval);
}


/*
 * iscsi_tran_get_name - create private /devices name for LUN
 *
 * This creates the <addr> in /devices/iscsi/<driver>@<addr>
 * path.  For this <addr> we return the <session/target_name>,<lun num>
 * Where <target_name> is an <iqn/eui/...> as defined by the iSCSI
 * specification.  We do modify the name slightly so that it still
 * complies with the IEEE <addr> naming scheme.  This means that we
 * will substitute out the ':', '@', ... and other reserved characters
 * defined in the IEEE definition with '%<hex value of special char>'
 * This routine is indirectly called by iscsi_lun_create_xxx.  These
 * calling routines must prevent the session and lun lists from changing
 * during this routine.
 */
static int
iscsi_tran_get_name(struct scsi_device *sd, char *name, int len)
{
	int		target		= 0;
	int		lun		= 0;
	iscsi_hba_t	*ihp		= NULL;
	iscsi_sess_t	*isp		= NULL;
	iscsi_lun_t	*ilp		= NULL;
	dev_info_t	*lun_dip	= NULL;

	ASSERT(sd != NULL);
	ASSERT(name != NULL);
	lun_dip = sd->sd_dev;
	ASSERT(lun_dip != NULL);

	/* get reference to soft state */
	ihp = (iscsi_hba_t *)ddi_get_soft_state(iscsi_state,
	    ddi_get_instance(ddi_get_parent(lun_dip)));
	if (ihp == NULL) {
		name[0] = '\0';
		return (0);
	}

	/* Get the target num */
	target = ddi_prop_get_int(DDI_DEV_T_ANY, sd->sd_dev,
	    DDI_PROP_DONTPASS, TARGET_PROP, 0);

	/* Get the target num */
	lun = ddi_prop_get_int(DDI_DEV_T_ANY, sd->sd_dev,
	    DDI_PROP_DONTPASS, LUN_PROP, 0);

	/*
	 * Now we need to find our ilp by walking the lists
	 * off the ihp and isp.
	 */
	/* See if we already created this session */

	/* Walk the HBA's session list */
	for (isp = ihp->hba_sess_list; isp; isp = isp->sess_next) {
		/* compare target name as the unique identifier */
		if (target == isp->sess_oid) {
			/* found match */
			break;
		}
	}

	/* If we found matching session continue searching for tgt */
	if (isp == NULL) {
		/* sess not found */
		name[0] = '\0';
		return (0);
	}

	/*
	 * Search for the matching iscsi lun structure.  We don't
	 * need to hold the READER for the lun list at this point.
	 * because the tran_get_name is being called from the online
	 * function which is already holding a reader on the lun
	 * list.
	 */
	for (ilp = isp->sess_lun_list; ilp; ilp = ilp->lun_next) {
		if (lun == ilp->lun_num) {
			/* found match */
			break;
		}
	}

	if (ilp == NULL) {
		/* tgt not found */
		name[0] = '\0';
		return (0);
	}

	/* Ensure enough space for lun_addr is available */
	ASSERT(ilp->lun_addr != NULL);
	if ((strlen(ilp->lun_addr) + 1) > len) {
		return (0);
	}

	/* copy lun_addr name */
	(void) strcpy(name, ilp->lun_addr);

	/*
	 * Based on IEEE-1275 we can't have any ':', ' ', '@', or '/'
	 * characters in our naming.  So replace all those characters
	 * with '-'
	 */
	iscsi_get_name_from_iqn(name, len);

	return (1);
}

/*
 * iscsi_tran_get_bus_addr - This returns a human readable string
 * for the bus address.  Examining most other drivers fcp, etc.  They
 * all just return the same string as tran_get_name.  In our case
 * our tran get name is already some what usable so leave alone.
 */
static int
iscsi_tran_get_bus_addr(struct scsi_device *sd, char *name, int len)
{
	return (iscsi_tran_get_name(sd, name, len));
}


/*
 * +--------------------------------------------------------------------+
 * | End of scsi_tran routines					  |
 * +--------------------------------------------------------------------+
 */

/*
 * +--------------------------------------------------------------------+
 * | Start of cb_ops routines					   |
 * +--------------------------------------------------------------------+
 */

/*
 * iscsi_open - Driver should be made IOCTL MT safe.  Otherwise
 * this function needs updated.
 */
/* ARGSUSED */
static int
iscsi_open(dev_t *devp, int flags, int otyp, cred_t *credp)
{
	return (0);
}

/*
 * iscsi_close -
 */
/* ARGSUSED */
static int
iscsi_close(dev_t dev, int flags, int otyp, cred_t *credp)
{
	return (0);
}

/*
 * iscsi_ioctl -
 */
/* ARGSUSED */
static int
iscsi_ioctl(dev_t dev, int cmd, intptr_t arg, int mode,
    cred_t *credp, int *rvalp)
{
	int			rtn		= 0;
	int			instance	= 0;
	int			list_space	= 0;
	int			lun_sz		= 0;
	int			did;
	int			retry;
	iscsi_hba_t		*ihp		= NULL;
	iscsi_sess_t		*isp		= NULL;
	iscsi_conn_t		*icp		= NULL;
	iscsi_login_params_t	*params		= NULL;
	iscsi_login_params_t	*tmpParams	= NULL;
	uchar_t			*name		= NULL;
	dev_info_t		*lun_dip	= NULL;

	entry_t			    e;
	iscsi_oid_t		    oid;
	iscsi_property_t	    *ipp;
	iscsi_static_property_t	    *ispp;
	iscsi_param_get_t	    *ilg;
	iscsi_param_set_t	    *ils;
	iscsi_target_list_t	    idl, *idlp		= NULL;
	iscsi_addr_list_t	    ial, *ialp		= NULL;
	iscsi_chap_props_t	    *chap		= NULL;
	iscsi_radius_props_t	    *radius		= NULL;
	iscsi_auth_props_t	    *auth		= NULL;
	iscsi_lun_list_t	    *ll, *llp		= NULL;
	iscsi_lun_props_t	    *lun		= NULL;
	iscsi_lun_t		    *ilp		= NULL;
	iSCSIDiscoveryMethod_t	    method;
	iSCSIDiscoveryProperties_t  discovery_props;
	iscsi_uscsi_t		    iu;
	iscsi_uscsi_t		    iu_caller;
#ifdef _MULTI_DATAMODEL
	/* For use when a 32 bit app makes a call into a 64 bit ioctl */
	iscsi_uscsi32_t		    iu32_caller;
	model_t			    model;
#endif /* _MULTI_DATAMODEL */
	void			    *void_p;
	iscsi_sendtgts_list_t	*stl_hdr;
	iscsi_sendtgts_list_t	*istl;
	int			stl_sz;
	iscsi_target_entry_t	*target;
	uint32_t		old_oid;
	uint32_t		target_oid;
	iscsi_targetparam_entry_t *curr_entry;
	char			*initiator_node_name;
	char			*initiator_node_alias;
	isns_portal_group_list_t    *pg_list = NULL;
	isns_server_portal_group_list_t    *server_pg_list_hdr = NULL;
	isns_server_portal_group_list_t    *server_pg_list = NULL;
	int			pg_list_sz, pg_sz_copy_out, server_pg_list_sz;
	iscsi_config_sess_t	*ics;
	int			size;
	boolean_t		rval;
	char			init_port_name[MAX_NAME_PROP_SIZE];
	iscsi_sockaddr_t	addr_dsc;
	iscsi_boot_property_t	*bootProp;
	boolean_t		discovered = B_TRUE;
	iscsi_tunable_object_t	*tpsg;
	iscsi_tunable_object_t	*tpss;
	iscsi_reen_t	*reenum;

	instance = getminor(dev);
	ihp = (iscsi_hba_t *)ddi_get_soft_state(iscsi_state, instance);
	if (ihp == NULL)
		return (EFAULT);

	iscsi_check_miniroot(ihp);
	if ((cmd != ISCSI_SMF_ONLINE) && (cmd != ISCSI_SMF_OFFLINE) &&
	    (cmd != ISCSI_SMF_GET)) {
		/* other cmd needs to acquire the service */
		if (iscsi_client_request_service(ihp) == B_FALSE) {
			return (EFAULT);
		}
	}

	switch (cmd) {
	/*
	 * ISCSI_CREATE_OID - Create a Object IDentifier for a TargetName
	 */
	case ISCSI_CREATE_OID:
		if (ddi_copyin((caddr_t)arg, &oid, sizeof (oid), mode)) {
			rtn = EFAULT;
			break;
		}
		if (oid.o_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		/* Set the target that this session is associated with */
		oid.o_oid = iscsi_targetparam_get_oid(oid.o_name);

		if (ddi_copyout(&oid, (caddr_t)arg, sizeof (oid), mode)) {
			rtn = EFAULT;
			break;
		}
		break;
	/*
	 * ISCSI_PARAM_GET - Get param for specified
	 * connection/session.
	 */
	case ISCSI_PARAM_GET:
		/* copyin user args */
		ilg = (iscsi_param_get_t *)kmem_alloc(sizeof (*ilg), KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, ilg, sizeof (*ilg), mode)) {
			rtn = EFAULT;
			kmem_free(ilg, sizeof (*ilg));
			break;
		}

		if (ilg->g_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ilg, sizeof (*ilg));
			break;
		}

		/* handle special case for Initiator name */
		if (ilg->g_param == ISCSI_LOGIN_PARAM_INITIATOR_NAME) {
			(void) strlcpy((char *)ilg->g_value.v_name,
			    (char *)ihp->hba_name, ISCSI_MAX_NAME_LEN);
		} else if (ilg->g_param == ISCSI_LOGIN_PARAM_INITIATOR_ALIAS) {
			if (ihp->hba_alias_length == 0) {
				rtn = EINVAL;
			} else {
				(void) strlcpy((char *)ilg->g_value.v_name,
				    (char *)ihp->hba_alias, ISCSI_MAX_NAME_LEN);
			}
		} else {
			/* To describe the validity of the requested param */
			boolean_t valid_flag = B_TRUE;

			name = NULL;

			/*
			 * switch login based if looking for initiator
			 * params
			 */
			rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
			if (ilg->g_oid == ihp->hba_oid) {
				/* initiator */
				params = &ihp->hba_params;
				name = ihp->hba_name;
				if (iscsi_get_persisted_param(name,
				    ilg, params) != 0) {
					valid_flag = B_FALSE;
				}
			} else {
				/*
				 * If the oid does represent a session check
				 * to see if it is a target oid.  If so,
				 * return the target's associated session.
				 */
				rtn = iscsi_sess_get(ilg->g_oid, ihp, &isp);
				if (rtn != 0) {
					rtn = iscsi_sess_get_by_target(
					    ilg->g_oid, ihp, &isp);
				}

				/*
				 * If rtn is zero then we have found an
				 * existing session.  Use the session name to
				 * do param lookup.  If rtn is non-zero then
				 * create a targetparam object and use its name
				 * for param lookup.
				 */
				if (rtn == 0) {
					name = isp->sess_name;
					params = &isp->sess_params;
				} else {
					name =
					    iscsi_targetparam_get_name(
					    ilg->g_oid);
					if (ilg->g_param_type ==
					    ISCSI_SESS_PARAM) {
						tmpParams =
						    (iscsi_login_params_t *)
						    kmem_alloc(
						    sizeof (*tmpParams),
						    KM_SLEEP);
						params = tmpParams;
					}
					rtn = 0;
				}

				if (name == NULL) {
					rw_exit(
					    &ihp->hba_sess_list_rwlock);
					rtn = EFAULT;
					kmem_free(ilg, sizeof (*ilg));
					if (tmpParams != NULL)
						kmem_free(tmpParams,
						    sizeof (*tmpParams));

					break;
				}

				if (ilg->g_param_type == ISCSI_SESS_PARAM) {
					/* session */
					/*
					 * Update sess_params with the
					 * latest params from the
					 * persistent store.
					 */
					if (iscsi_get_persisted_param(name,
					    ilg, params) != 0) {
						/*
						 * If the parameter in
						 * question is not
						 * overriden, no effect
						 * on existing session
						 * parameters. However,
						 * the parameter is
						 * marked invalid
						 * (from the standpoint
						 * of whether it is
						 * overriden).
						 */
						valid_flag = B_FALSE;
					}
				} else if (ilg->g_param_type ==
				    ISCSI_CONN_PARAM && isp != NULL) {
					/* connection */
					rw_enter(&isp->sess_conn_list_rwlock,
					    RW_READER);
					/* Assuming 1 conn per sess. */
					/*
					 * MC/S - Need to be modified to
					 * take g_conn_cid into account when
					 * we go multi-connection.
					 */
					if ((isp->sess_conn_act != NULL) &&
					    (isp->sess_conn_act->conn_state ==
					    ISCSI_CONN_STATE_LOGGED_IN)) {
						params = &(isp->
						    sess_conn_act->
						    conn_params);
					} else {
						valid_flag = B_FALSE;
					}
					rw_exit(&isp->sess_conn_list_rwlock);
				}
			}

			/* make sure we have params to get info from */
			if (params) {
				rtn = iscsi_get_param(params, valid_flag, ilg);

				/*
				 * for target parameters, check if any
				 * parameters were overridden at the initiator
				 * level. If so, then change the default value
				 * to the initiator's overridden value
				 */
				if ((rtn == 0) &&
				    (ilg->g_oid != ihp->hba_oid)) {
					iscsi_override_target_default(ihp,
					    ilg);
				}
			}
			rw_exit(&ihp->hba_sess_list_rwlock);
		}

		if (rtn == 0) {
			rtn = ddi_copyout(ilg, (caddr_t)arg,
			    sizeof (iscsi_param_get_t), mode);
		}
		kmem_free(ilg, sizeof (*ilg));
		if (tmpParams != NULL)
			kmem_free(tmpParams, sizeof (*tmpParams));
		break;

	/*
	 * ISCSI_INIT_NODE_NAME_SET - Change the initiator-node name for
	 * the specified connection/session.
	 */
	case ISCSI_INIT_NODE_NAME_SET:
		/* copyin user args */
		ils = (iscsi_param_set_t *)kmem_alloc(sizeof (*ils), KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, ils, sizeof (*ils), mode)) {
			rtn = EFAULT;
			kmem_free(ils, sizeof (*ils));
			break;
		}

		if (ils->s_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ils, sizeof (*ils));
			break;
		}

		/* saving off the old initiator-node name */
		initiator_node_name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);
		rval = persistent_initiator_name_get(initiator_node_name,
		    ISCSI_MAX_NAME_LEN);

		rtn = iscsi_set_params(ils, ihp, B_TRUE);
		kmem_free(ils, sizeof (*ils));
		if (rtn != 0) {
			kmem_free(initiator_node_name, ISCSI_MAX_NAME_LEN);
			initiator_node_name = NULL;
			break;
		}

		(void) snprintf(init_port_name, MAX_NAME_PROP_SIZE,
		    "%s,%02x%02x%02x%02x%02x%02x",
		    (char *)ihp->hba_name, ihp->hba_isid[0],
		    ihp->hba_isid[1], ihp->hba_isid[2],
		    ihp->hba_isid[3], ihp->hba_isid[4],
		    ihp->hba_isid[5]);

		if (ddi_prop_update_string(DDI_DEV_T_NONE,
		    ihp->hba_dip, SCSI_ADDR_PROP_INITIATOR_PORT,
		    init_port_name) != DDI_PROP_SUCCESS) {
			cmn_err(CE_WARN, "iscsi_ioctl: Updating "
			    SCSI_ADDR_PROP_INITIATOR_PORT " property on iSCSI "
			    "HBA(%s) with dip(%d) Failed",
			    (char *)ihp->hba_name,
			    ddi_get_instance(ihp->hba_dip));
		}

		/*
		 * Deregister the old initiator-node name from the iSNS
		 * server
		 * Register the new initiator-node name with the iSNS server
		 */
		method = persistent_disc_meth_get();
		if (method & iSCSIDiscoveryMethodISNS) {
			if (rval == B_TRUE) {
				if (strlen(initiator_node_name) > 0) {
				/*
				 * we will attempt to offline the targets.
				 * if logouts fail, we will still continue
				 */
#define	STRING_INNO "initiator-node name - Offline "
#define	STRING_FFOMD "failed for one or more devices"
					if ((iscsid_del(
					    ihp, NULL, method, NULL))
					    != B_TRUE) {
						cmn_err(CE_NOTE,
						    "Attempting to change "
						    STRING_INNO
						    STRING_FFOMD);
					}
					(void) isns_dereg(ihp->hba_isid,
					    (uint8_t *)initiator_node_name);
#undef STRING_INNO
#undef STRING_FFOMD
				}
			}
			if (persistent_initiator_name_get(initiator_node_name,
			    ISCSI_MAX_NAME_LEN) != B_TRUE) {
				kmem_free(initiator_node_name,
				    ISCSI_MAX_NAME_LEN);
				initiator_node_name = NULL;
				rtn = EIO;
				break;
			}
			if (strlen(initiator_node_name) == 0) {
				kmem_free(initiator_node_name,
				    ISCSI_MAX_NAME_LEN);
				initiator_node_name = NULL;
				rtn = EIO;
				break;
			}

			initiator_node_alias = kmem_zalloc(ISCSI_MAX_NAME_LEN,
			    KM_SLEEP);
			if (persistent_alias_name_get(initiator_node_alias,
			    ISCSI_MAX_NAME_LEN) != B_TRUE) {
				initiator_node_alias[0] = '\0';
			}

			(void) isns_reg(ihp->hba_isid,
			    (uint8_t *)initiator_node_name,
			    ISCSI_MAX_NAME_LEN,
			    (uint8_t *)initiator_node_alias,
			    ISCSI_MAX_NAME_LEN,
			    ISNS_INITIATOR_NODE_TYPE,
			    isns_scn_callback);
			iscsid_do_isns_query(ihp);

			kmem_free(initiator_node_alias, ISCSI_MAX_NAME_LEN);
			initiator_node_alias = NULL;
		}

		kmem_free(initiator_node_name, ISCSI_MAX_NAME_LEN);
		initiator_node_name = NULL;
		break;

	/*
	 * ISCSI_PARAM_SET - Set param for specified connection/session.
	 */
	case ISCSI_PARAM_SET:
		/* copyin user args */
		ils = (iscsi_param_set_t *)kmem_alloc(sizeof (*ils), KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, ils, sizeof (*ils), mode)) {
			rtn = EFAULT;
			kmem_free(ils, sizeof (*ils));
			break;
		}

		if (ils->s_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ils, sizeof (*ils));
			break;
		}
		rtn = iscsi_set_params(ils, ihp, B_TRUE);
		if (iscsiboot_prop) {
			if (iscsi_cmp_boot_sess_oid(ihp, ils->s_oid)) {
				/*
				 * found active session for this object
				 * or this is initiator's object
				 * with mpxio enabled
				 */
				if (!iscsi_reconfig_boot_sess(ihp)) {
					rtn = EINVAL;
					kmem_free(ils, sizeof (*ils));
					break;
				}
			}
		}
		kmem_free(ils, sizeof (*ils));
		break;

	/*
	 * ISCSI_TARGET_PARAM_CLEAR
	 * - remove custom parameter settings for a target.
	 */
	case ISCSI_TARGET_PARAM_CLEAR:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		if ((e.e_oid != ihp->hba_oid) &&
		    (e.e_oid != ISCSI_OID_NOTSET)) {
			boolean_t rval1, rval2, rval3;
			uchar_t	    *t_name;
			iscsi_sess_t *t_isp;
			boolean_t    t_rtn = B_TRUE;
			persistent_param_t  t_param;
			iscsi_config_sess_t t_ics;
			persistent_tunable_param_t t_tpsg;

			rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
			/*
			 * If the oid does represent a session check to see
			 * if it is a target oid.  If so, return the target's
			 * associated session.
			 */
			rtn = iscsi_sess_get(e.e_oid, ihp, &isp);
			if (rtn != 0) {
				rtn = iscsi_sess_get_by_target(e.e_oid, ihp,
				    &isp);
			}

			/*
			 * If rtn is zero then we have found an
			 * existing session.  Use the session name to
			 * do param lookup.  If rtn is non-zero then
			 * create a targetparam object and use its name
			 * for param lookup.
			 */
			if (rtn == 0) {
				t_name = isp->sess_name;
			} else {
				t_name = iscsi_targetparam_get_name(e.e_oid);
				rtn = 0;
			}

			if (t_name == NULL) {
				rw_exit(&ihp->hba_sess_list_rwlock);
				rtn = EFAULT;
				break;
			}

			name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);
			(void) strncpy((char *)name, (char *)t_name,
			    ISCSI_MAX_NAME_LEN);

			t_ics.ics_in = 1;
			rval1 = persistent_param_get((char *)name, &t_param);
			rval2 = persistent_get_config_session((char *)name,
			    &t_ics);
			rval3 = persistent_get_tunable_param((char *)name,
			    &t_tpsg);

			if ((rval1 == B_FALSE) && (rval2 == B_FALSE) &&
			    (rval3 == B_FALSE)) {
				/* no any target parameters get */
				kmem_free(name, ISCSI_MAX_NAME_LEN);
				rw_exit(&ihp->hba_sess_list_rwlock);
				rtn = EIO;
				break;
			}

			if (persistent_param_clear((char *)name) == B_FALSE) {
				kmem_free(name, ISCSI_MAX_NAME_LEN);
				rw_exit(&ihp->hba_sess_list_rwlock);
				rtn = EIO;
				break;
			}

			ics = kmem_zalloc(sizeof (*ics), KM_SLEEP);
			ics->ics_ver = ISCSI_INTERFACE_VERSION;
			ics->ics_oid = ISCSI_INITIATOR_OID;
			ics->ics_in  = 1;

			/*
			 * We may have multiple sessions with different
			 * tpgt values.  So we need to loop through
			 * the sessions and update all sessions.
			 */
			for (isp = ihp->hba_sess_list; isp;
			    isp = t_isp) {
				t_isp = isp->sess_next;

				if (strncmp((char *)isp->sess_name,
				    (char *)name, ISCSI_MAX_NAME_LEN) == 0) {
					/*
					 * When removing target-params we need
					 * slightly different actions depending
					 * on if the session should still exist.
					 * Get the initiator-node value for
					 * MS/T.  If there is no initiator
					 * value then assume the default value
					 * of 1.  If the initiator value is
					 * less than this ISID then we need to
					 * destroy the session.  Otherwise
					 * update the session information and
					 * resync (N7 event).
					 */
					rtn = iscsi_ioctl_get_config_sess(
					    ihp, ics);
					if (((rtn != 0) &&
					    (isp->sess_isid[5] > 0)) ||
					    ((rtn == 0) &&
					    (ics->ics_out <=
					    isp->sess_isid[5]))) {

						/*
						 * This session should no
						 * longer exist.  Remove
						 * session.
						 */
						if (!ISCSI_SUCCESS(
						    iscsi_sess_destroy(isp))) {
							t_rtn = B_FALSE;
							continue;
						}
						isp = ihp->hba_sess_list;
					} else {
						uint32_t event_count;
						/*
						 * Reset the session
						 * parameters.
						 */
						bcopy(&(isp->sess_hba->
						    hba_params),
						    &(isp->sess_params),
						    sizeof (isp->sess_params));
						if (iscsiboot_prop &&
						    isp->sess_boot) {
							/*
							 * reconfig boot
							 * session later
							 */
							continue;
						}
						/*
						 * Notify the session that the
						 * login parameters have
						 * changed.
						 */
						event_count = atomic_inc_32_nv(
						    &isp->
						    sess_state_event_count);
						iscsi_sess_enter_state_zone(
						    isp);

						iscsi_sess_state_machine(isp,
						    ISCSI_SESS_EVENT_N7,
						    event_count);

						iscsi_sess_exit_state_zone(
						    isp);
					}
				}
			}
			if (t_rtn == B_FALSE) {
				boolean_t t_rval = B_TRUE;
				/* Failure!, restore target's parameters */
				if (rval1 == B_TRUE) {
					rval1 = persistent_param_set(
					    (char *)name, &t_param);
					if (rval1 == B_FALSE) {
						t_rval = B_FALSE;
					}
				}
				if (rval2 == B_TRUE) {
					rval2 = persistent_set_config_session(
					    (char *)name, &t_ics);
					if (rval2 == B_FALSE) {
						t_rval = B_FALSE;
					}
				}
				if (rval3 == B_TRUE) {
					rval3 = persistent_set_tunable_param(
					    (char *)name, &t_tpsg);
					if (rval3 == B_FALSE) {
						t_rval = B_FALSE;
					}
				}
				if (t_rval == B_FALSE) {
					cmn_err(CE_WARN, "Failed to restore "
					    "target's parameters after remove "
					    "session related to target "
					    "parameters failure.");
				}
				rtn = EBUSY;
			}
			kmem_free(ics, sizeof (*ics));
			kmem_free(name, ISCSI_MAX_NAME_LEN);
			rw_exit(&ihp->hba_sess_list_rwlock);
			if (iscsiboot_prop) {
				if (iscsi_cmp_boot_sess_oid(ihp, e.e_oid)) {
					/*
					 * found active session for this object
					 * or this is initiator object
					 * with mpxio enabled
					 */
					if (!iscsi_reconfig_boot_sess(ihp)) {
						rtn = EINVAL;
						break;
					}
				}
			}
		}
		break;

	/*
	 * ISCSI_TARGET_OID_LIST_GET -
	 */
	case ISCSI_TARGET_OID_LIST_GET:
		/* copyin user args */
		if (ddi_copyin((caddr_t)arg, &idl,
		    sizeof (idl), mode)) {
			rtn = EFAULT;
			break;
		}

		if (idl.tl_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		list_space = sizeof (iscsi_target_list_t);
		if (idl.tl_in_cnt != 0)
			list_space += (sizeof (uint32_t) *
			    (idl.tl_in_cnt - 1));

		idlp = kmem_zalloc(list_space, KM_SLEEP);
		bcopy(&idl, idlp, sizeof (idl));
		idlp->tl_out_cnt = 0;

		/*
		 * If target list type is ISCSI_TGT_OID_LIST and discovery
		 * has not been completed or in progress, poke the discovery
		 * methods so target information is returned
		 */
		mutex_enter(&ihp->hba_discovery_events_mutex);
		method = ihp->hba_discovery_events;
		if ((idl.tl_tgt_list_type == ISCSI_TGT_OID_LIST) &&
		    (method != ISCSI_ALL_DISCOVERY_METHODS) &&
		    (ihp->hba_discovery_in_progress == B_FALSE)) {
			ihp->hba_discovery_in_progress = B_TRUE;
			mutex_exit(&ihp->hba_discovery_events_mutex);
			iscsid_poke_discovery(ihp, iSCSIDiscoveryMethodUnknown);
			mutex_enter(&ihp->hba_discovery_events_mutex);
			ihp->hba_discovery_in_progress = B_FALSE;
		}
		mutex_exit(&ihp->hba_discovery_events_mutex);

		/*
		 * Return the correct list information based on the type
		 */
		switch (idl.tl_tgt_list_type) {
		/* ISCSI_TGT_PARAM_OID_LIST - iscsiadm list target-params */
		case ISCSI_TGT_PARAM_OID_LIST:
			/* get params from persistent store */
			iscsi_targetparam_lock_list(RW_READER);
			curr_entry = iscsi_targetparam_get_next_entry(NULL);
			while (curr_entry != NULL) {
				if (idlp->tl_out_cnt < idlp->tl_in_cnt) {
					idlp->tl_oid_list[idlp->tl_out_cnt] =
					    curr_entry->target_oid;
				}
				idlp->tl_out_cnt++;
				curr_entry = iscsi_targetparam_get_next_entry(
				    curr_entry);
			}
			iscsi_targetparam_unlock_list();
			break;

		/* ISCSI_STATIC_TGT_OID_LIST - iscsiadm list static-config */
		case ISCSI_STATIC_TGT_OID_LIST:
		{
			char *target_name = NULL;
			void *v = NULL;

			/* get static-config from persistent store */
			target_name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);
			persistent_static_addr_lock();
			while (persistent_static_addr_next(&v,
			    (char *)target_name, &e) == B_TRUE) {

				if (idlp->tl_out_cnt < idlp->tl_in_cnt) {
					idlp->tl_oid_list[idlp->tl_out_cnt] =
					    e.e_oid;
				}
				idlp->tl_out_cnt++;

			}

			persistent_static_addr_unlock();
			kmem_free(target_name, ISCSI_MAX_NAME_LEN);
			break;
		}

		/* ISCSI_TGT_OID_LIST - iscsiadm list target */
		case ISCSI_TGT_OID_LIST:

			/* get sessions from hba's session list */
			rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
			for (isp = ihp->hba_sess_list; isp;
			    isp = isp->sess_next) {

				if (((isp->sess_state !=
				    ISCSI_SESS_STATE_FREE) ||
				    (isp->sess_discovered_by !=
				    iSCSIDiscoveryMethodUnknown)) &&
				    (isp->sess_type ==
				    ISCSI_SESS_TYPE_NORMAL)) {
					if (idlp->tl_out_cnt <
					    idlp->tl_in_cnt) {
						idlp->tl_oid_list[
						    idlp->tl_out_cnt] =
						    isp->sess_oid;
					}
					idlp->tl_out_cnt++;
				}

			}
			rw_exit(&ihp->hba_sess_list_rwlock);
			break;

		default:
			ASSERT(FALSE);
		}

		rtn = ddi_copyout(idlp, (caddr_t)arg, list_space, mode);
		kmem_free(idlp, list_space);
		break;

	/*
	 * ISCSI_TARGET_PROPS_GET -
	 */
	case ISCSI_TARGET_PROPS_GET:
		/* ---- fall through sense the code is almost the same ---- */

	/*
	 * ISCSI_TARGET_PROPS_SET -
	 */
	case ISCSI_TARGET_PROPS_SET:
		/* copyin user args */
		ipp = (iscsi_property_t *)kmem_alloc(sizeof (*ipp),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, ipp, sizeof (*ipp), mode)) {
			rtn = EFAULT;
			kmem_free(ipp, sizeof (*ipp));
			break;
		}

		if (ipp->p_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ipp, sizeof (*ipp));
			break;
		}

		rtn = iscsi_target_prop_mod(ihp, ipp, cmd);
		if (rtn == 0)
			rtn = ddi_copyout(ipp, (caddr_t)arg,
			    sizeof (*ipp), mode);
		kmem_free(ipp, sizeof (*ipp));
		break;

	/*
	 * ISCSI_TARGET_ADDRESS_GET -
	 */
	case ISCSI_TARGET_ADDRESS_GET:
		if (ddi_copyin((caddr_t)arg, &ial, sizeof (ial), mode)) {
			rtn = EFAULT;
			break;
		}

		if (ial.al_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		/*
		 * Find out how much space we need to malloc for the users
		 * request.
		 */
		list_space = sizeof (iscsi_addr_list_t);
		if (ial.al_in_cnt != 0) {
			list_space += (sizeof (iscsi_addr_t) *
			    (ial.al_in_cnt - 1));
		}
		ialp = (iscsi_addr_list_t *)kmem_zalloc(list_space, KM_SLEEP);

		/* Copy in the header portion */
		bcopy(&ial, ialp, sizeof (ial));

		/* session */
		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		rtn = iscsi_sess_get(ialp->al_oid, ihp, &isp);
		if (rtn != 0) {
			rw_exit(&ihp->hba_sess_list_rwlock);
			rtn = EFAULT;
			break;
		}

		ialp->al_out_cnt	= 0;
		ialp->al_tpgt		= isp->sess_tpgt_conf;
		rw_enter(&isp->sess_conn_list_rwlock, RW_READER);
		for (icp = isp->sess_conn_list; icp; icp = icp->conn_next) {
			if (icp->conn_state != ISCSI_CONN_STATE_LOGGED_IN) {
				continue;
			}
			if (ialp->al_out_cnt < ialp->al_in_cnt) {
				iscsi_addr_t		*ap;

				ap = &ialp->al_addrs[ialp->al_out_cnt];
				if (icp->conn_base_addr.sin.sa_family
				    == AF_INET) {

					struct sockaddr_in *addr_in =
					    (struct sockaddr_in *)&icp->
					    conn_base_addr.sin4;
					ap->a_addr.i_insize =
					    sizeof (struct in_addr);
					bcopy(&addr_in->sin_addr.s_addr,
					    &ap->a_addr.i_addr.in4.s_addr,
					    sizeof (struct in_addr));
					ap->a_port = addr_in->sin_port;

				} else {

					struct sockaddr_in6 *addr_in6 =
					    (struct sockaddr_in6 *)&icp->
					    conn_base_addr.sin6;
					ap->a_addr.i_insize =
					    sizeof (struct in6_addr);
					bcopy(&addr_in6->sin6_addr.s6_addr,
					    &ap->a_addr.i_addr.in6.s6_addr,
					    sizeof (struct in6_addr));
					ap->a_port = addr_in6->sin6_port;

				}
			}
			ialp->al_out_cnt++;
		}
		rw_exit(&isp->sess_conn_list_rwlock);
		rw_exit(&ihp->hba_sess_list_rwlock);

		rtn = ddi_copyout(ialp, (caddr_t)arg, list_space, mode);
		kmem_free(ialp, list_space);
		break;

	/*
	 * ISCSI_CHAP_SET -
	 */
	case ISCSI_CHAP_SET:
		chap = (iscsi_chap_props_t *)kmem_zalloc(sizeof (*chap),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, chap, sizeof (*chap), mode)) {
			rtn = EFAULT;
			kmem_free(chap, sizeof (*chap));
			break;
		} else if (chap->c_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(chap, sizeof (*chap));
			break;
		}

		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		if (chap->c_oid == ihp->hba_oid)
			name = ihp->hba_name;
		else {
			rtn = iscsi_sess_get(chap->c_oid, ihp, &isp);
			if (rtn != 0) {
				rtn = iscsi_sess_get_by_target(
				    chap->c_oid, ihp, &isp);
			}

			/*
			 * If rtn is zero then we have found an
			 * existing session.  Use the session name to
			 * do param lookup.  If rtn is non-zero then
			 * create a targetparam object and use its name
			 * for param lookup.
			 */
			if (rtn == 0) {
				name = isp->sess_name;
			} else {
				name =
				    iscsi_targetparam_get_name(chap->c_oid);
				rtn = 0;
			}
		}

		if (name == NULL) {
			rw_exit(
			    &ihp->hba_sess_list_rwlock);
			rtn = EFAULT;
			kmem_free(chap, sizeof (*chap));
			break;
		}

		if (persistent_chap_set((char *)name, chap) ==
		    B_FALSE) {
			rtn = EIO;
		}
		rw_exit(&ihp->hba_sess_list_rwlock);
		kmem_free(chap, sizeof (*chap));
		break;

	/*
	 * ISCSI_CHAP_GET -
	 */
	case ISCSI_CHAP_GET:
		chap = (iscsi_chap_props_t *)kmem_zalloc(sizeof (*chap),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, chap, sizeof (*chap), mode)) {
			kmem_free(chap, sizeof (*chap));
			rtn = EFAULT;
			break;
		} else if (chap->c_vers != ISCSI_INTERFACE_VERSION) {
			kmem_free(chap, sizeof (*chap));
			rtn = EINVAL;
			break;
		}

		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		if (chap->c_oid == ihp->hba_oid)
			name = ihp->hba_name;
		else {
			rtn = iscsi_sess_get(chap->c_oid, ihp, &isp);
			if (rtn != 0) {
				rtn = iscsi_sess_get_by_target(
				    chap->c_oid, ihp, &isp);
			}

			/*
			 * If rtn is zero then we have found an
			 * existing session.  Use the session name to
			 * do param lookup.  If rtn is non-zero then
			 * create a targetparam object and use its name
			 * for param lookup.
			 */
			if (rtn == 0) {
				name = isp->sess_name;
			} else {
				rtn = 0;
				name =
				    iscsi_targetparam_get_name(chap->c_oid);
			}

			if (name == NULL) {
				rw_exit(&ihp->hba_sess_list_rwlock);
				rtn = EFAULT;
				break;
			}
			/*
			 * Initialize the target-side chap name to the
			 * session name if no chap settings have been
			 * saved for the current session.
			 */
			if (persistent_chap_get((char *)name,
			    chap) == B_FALSE) {
				int name_len = strlen((char *)name);
				iscsi_chap_props_t *chap = NULL;
				chap = (iscsi_chap_props_t *)kmem_zalloc
				    (sizeof (iscsi_chap_props_t), KM_SLEEP);
				bcopy((char *)name, chap->c_user, name_len);
				chap->c_user_len = name_len;
				(void) (persistent_chap_set((char *)name,
				    chap));
				kmem_free(chap, sizeof (*chap));
			}
		}

		if (name == NULL) {
			rw_exit(
			    &ihp->hba_sess_list_rwlock);
			rtn = EFAULT;
			break;
		}

		if (persistent_chap_get((char *)name, chap) == B_FALSE) {
			rw_exit(&ihp->hba_sess_list_rwlock);
			rtn = EIO;
			break;
		}
		rw_exit(&ihp->hba_sess_list_rwlock);

		rtn = ddi_copyout(chap, (caddr_t)arg, sizeof (*chap), mode);
		kmem_free(chap, sizeof (*chap));
		break;

	/*
	 * ISCSI_CHAP_CLEAR -
	 */
	case ISCSI_CHAP_CLEAR:
		chap = (iscsi_chap_props_t *)kmem_zalloc(sizeof (*chap),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, chap, sizeof (*chap), mode)) {
			rtn = EFAULT;
			kmem_free(chap, sizeof (*chap));
			break;
		} else if (chap->c_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(chap, sizeof (*chap));
			break;
		}

		if (chap->c_oid == ihp->hba_oid) {
			iscsi_sess_t *sessp;

			name = ihp->hba_name;

			if (persistent_chap_clear(
			    (char *)name) == B_FALSE) {
				rtn = EIO;
			}

			/*
			 * Loop through all sessions and memset their
			 * (initiator's) passwords
			 */
			rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
			for (sessp = ihp->hba_sess_list; sessp;
			    sessp = sessp->sess_next) {
				(void) memset(sessp->sess_auth.password,
				    0, iscsiAuthStringMaxLength);
				sessp->sess_auth.password_length = 0;
			}
			rw_exit(&ihp->hba_sess_list_rwlock);

		} else {
			rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
			/*
			 * If the oid does represent a session check to see
			 * if it is a target oid.  If so, return the target's
			 * associated session.
			 */
			rtn = iscsi_sess_get(chap->c_oid, ihp, &isp);
			if (rtn != 0) {
				rtn = iscsi_sess_get_by_target(chap->c_oid,
				    ihp, &isp);
			}

			rw_exit(&ihp->hba_sess_list_rwlock);

			/*
			 * If rtn is zero then we have found an
			 * existing session.  Use the session name to
			 * do param lookup.  If rtn is non-zero then
			 * create a targetparam object and use its name
			 * for param lookup.
			 */
			if (rtn == 0) {
				name = isp->sess_name;
			} else {
				name =
				    iscsi_targetparam_get_name(chap->c_oid);
				rtn = 0;
			}

			if (name == NULL) {
				rtn = EFAULT;
				break;
			}

			if (persistent_chap_clear(
			    (char *)name) == B_FALSE) {
				rtn = EIO;
			}

			/*
			 * Clear out session chap password if we found a
			 * session above.
			 */
			if (isp != NULL) {
				(void) memset(isp->sess_auth.password_in,
				    0, iscsiAuthStringMaxLength);
				isp->sess_auth.password_length_in = 0;
			}

		}

		kmem_free(chap, sizeof (*chap));
		break;

	/*
	 * ISCSI_STATIC_GET -
	 */
	case ISCSI_STATIC_GET:
		ispp = (iscsi_static_property_t *)kmem_alloc(
		    sizeof (*ispp), KM_SLEEP);

		if (ddi_copyin((caddr_t)arg, ispp, sizeof (*ispp), mode)) {
			rtn = EFAULT;
			kmem_free(ispp, sizeof (*ispp));
			break;
		}

		if (ispp->p_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ispp, sizeof (*ispp));
			break;
		}

		{
			void *v = NULL;
			boolean_t found = B_FALSE;

			persistent_static_addr_lock();
			while (persistent_static_addr_next(&v,
			    (char *)ispp->p_name, &e) == B_TRUE) {

				if (ispp->p_oid == e.e_oid) {
					/*
					 * In case there are multiple
					 * addresses associated with the
					 * given target OID, pick the first
					 * one.
					 */
					iscsi_addr_t *ap;

					ap = &(ispp->p_addr_list.al_addrs[0]);
					ap->a_port = e.e_port;
					ap->a_addr.i_insize = e.e_insize;
					bcopy(e.e_u.u_in6.s6_addr,
					    ap->a_addr.i_addr.in6.s6_addr,
					    e.e_insize);
					ispp->p_name_len =
					    strlen((char *)ispp->p_name);
					ispp->p_addr_list.al_tpgt = e.e_tpgt;
					ispp->p_addr_list.al_out_cnt = 1;

					found = B_TRUE;
					break;
				}
			}
			persistent_static_addr_unlock();

			if (found == B_TRUE) {
				rtn = ddi_copyout(ispp, (caddr_t)arg,
				    sizeof (*ispp), mode);
			} else {
				rtn = ENOENT;
			}
		}
		kmem_free(ispp, sizeof (*ispp));

		break;

	/*
	 * ISCSI_STATIC_SET -
	 */
	case ISCSI_STATIC_SET:
		target = iscsi_ioctl_copyin((caddr_t)arg, mode,
		    sizeof (*target));
		if (target == NULL) {
			rtn = EFAULT;
			break;
		}

		if ((target->te_entry.e_vers != ISCSI_INTERFACE_VERSION) ||
		    (target->te_entry.e_insize == 0)) {
			kmem_free(target, sizeof (*target));
			rtn = EINVAL;
			break;
		}

		/* Check if the target's already been added */
		{
			boolean_t static_target_found = B_FALSE;
			void *v = NULL;

			name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);
			persistent_static_addr_lock();
			while (persistent_static_addr_next(&v, (char *)name,
			    &e) == B_TRUE) {
				/*
				 * MC/S - Need to check IP address and port
				 * number as well when we support MC/S.
				 */
				if ((strncmp((char *)name,
				    (char *)target->te_name,
				    ISCSI_MAX_NAME_LEN) == 0) &&
				    (target->te_entry.e_tpgt == e.e_tpgt) &&
				    (target->te_entry.e_insize == e.e_insize) &&
				    (bcmp(&target->te_entry.e_u, &e.e_u,
				    e.e_insize) == 0)) {
					/*
					 * We don't allow MC/S for now but
					 * we do allow adding the same target
					 * with different TPGTs (hence,
					 * different sessions).
					 */
					static_target_found = B_TRUE;
					break;
				}
			}
			persistent_static_addr_unlock();
			kmem_free(name, ISCSI_MAX_NAME_LEN);

			if (static_target_found == B_TRUE) {
				/* Duplicate entry */
				kmem_free(target, sizeof (*target));
				rtn = EEXIST;
				break;
			}
		}

		if (target->te_entry.e_oid == ISCSI_OID_NOTSET) {
			mutex_enter(&iscsi_oid_mutex);
			target->te_entry.e_oid = iscsi_oid++;
			mutex_exit(&iscsi_oid_mutex);
		}

		persistent_static_addr_lock();
		if (persistent_static_addr_set((char *)target->te_name,
		    &target->te_entry) == B_FALSE) {
			persistent_static_addr_unlock();
			kmem_free(target, sizeof (*target));
			rtn = EIO;
			break;
		}
		persistent_static_addr_unlock();

		/*
		 * If Static Targets discovery is enabled, then add
		 * target to discovery queue. Otherwise, just create
		 * the session for potential future use.
		 */
		method = persistent_disc_meth_get();
		if (method & iSCSIDiscoveryMethodStatic) {
			iscsid_poke_discovery(ihp, iSCSIDiscoveryMethodStatic);
			(void) iscsid_login_tgt(ihp, (char *)target->te_name,
			    iSCSIDiscoveryMethodStatic, NULL);
		}

		rtn = iscsi_ioctl_copyout(target, sizeof (*target),
		    (caddr_t)arg, mode);
		break;

	/*
	 * ISCSI_STATIC_CLEAR -
	 */
	case ISCSI_STATIC_CLEAR:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		{
			boolean_t	found = B_FALSE;
			void		*v = NULL;
			entry_t		tmp_e;
			char		*name = NULL;

			name = kmem_zalloc(ISCSI_MAX_NAME_LEN, KM_SLEEP);

			/* Find name for matching static_tgt oid */
			persistent_static_addr_lock();
			while (persistent_static_addr_next(&v,
			    (char *)name, &tmp_e) == B_TRUE) {
				if (e.e_oid == tmp_e.e_oid) {
					found = B_TRUE;
					break;
				}
			}

			/* If static_tgt found logout and remove it */
			if (found == B_TRUE) {

				iscsid_addr_to_sockaddr(tmp_e.e_insize,
				    &tmp_e.e_u, tmp_e.e_port, &addr_dsc.sin);

				persistent_static_addr_unlock();

				/*
				 * If discovery in progress, try few times
				 * before return busy
				 */
				retry = 0;
				mutex_enter(&ihp->hba_discovery_events_mutex);
				while (ihp->hba_discovery_in_progress ==
				    B_TRUE) {
					if (++retry == 5) {
						rtn = EBUSY;
						break;
					}
					mutex_exit(
					    &ihp->hba_discovery_events_mutex);
					delay(SEC_TO_TICK(
					    ISCSI_DISC_DELAY));
					mutex_enter(
					    &ihp->hba_discovery_events_mutex);
				}
				/* remove from persistent store */
				if (rtn == 0 && persistent_static_addr_clear(
				    e.e_oid) == B_FALSE) {
					rtn = EIO;
				}
				mutex_exit(&ihp->hba_discovery_events_mutex);

				if (rtn != 0) {
					kmem_free(name, ISCSI_MAX_NAME_LEN);
					break;
				}

				/* Attempt to logout of target */
				if (iscsid_del(ihp, (char *)name,
				    iSCSIDiscoveryMethodStatic, &addr_dsc.sin)
				    == B_FALSE) {
					persistent_static_addr_lock();

					/*
					 * Restore static_tgt to
					 * persistent store
					 */
					if (persistent_static_addr_set(
					    (char *)name,
					    &tmp_e) == B_FALSE) {
						cmn_err(CE_WARN, "Failed to "
						    "restore static target "
						    "address after logout "
						    "target failure.");
					}
					persistent_static_addr_unlock();
					rtn = EBUSY;
				} else {
					iscsid_poke_discovery(ihp,
					    iSCSIDiscoveryMethodStatic);
					(void) iscsid_login_tgt(ihp,
					    (char *)name,
					    iSCSIDiscoveryMethodStatic,
					    NULL);

				}
			} else {
				persistent_static_addr_unlock();
				rtn = EIO;
			}
			kmem_free(name, ISCSI_MAX_NAME_LEN);
		}
		break;

	/*
	 * ISCSI_ISNS_SERVER_ADDR_SET:
	 */
	case ISCSI_ISNS_SERVER_ADDR_SET:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		if (persistent_isns_addr_set(&e) == B_FALSE) {
			rtn = EIO;
			break;
		}

		/*
		 * If iSNS server discovery is enabled, then kickoff
		 * discovery of the targets advertised by the recently
		 * added iSNS server address.
		 */
		method = persistent_disc_meth_get();
		if (method & iSCSIDiscoveryMethodISNS) {
			initiator_node_name = kmem_zalloc(ISCSI_MAX_NAME_LEN,
			    KM_SLEEP);
			if (persistent_initiator_name_get(initiator_node_name,
			    ISCSI_MAX_NAME_LEN) != B_TRUE) {
				kmem_free(initiator_node_name,
				    ISCSI_MAX_NAME_LEN);
				initiator_node_name = NULL;
				rtn = EIO;
				break;
			}
			if (strlen(initiator_node_name) == 0) {
				kmem_free(initiator_node_name,
				    ISCSI_MAX_NAME_LEN);
				initiator_node_name = NULL;
				rtn = EIO;
				break;
			}

			initiator_node_alias = kmem_zalloc(ISCSI_MAX_NAME_LEN,
			    KM_SLEEP);
			if (persistent_alias_name_get(initiator_node_alias,
			    ISCSI_MAX_NAME_LEN) != B_TRUE) {
				initiator_node_alias[0] = '\0';
			}

			/*
			 * Register this initiator node against this iSNS
			 * server.
			 */
			(void) isns_reg_one_server(&e, ihp->hba_isid,
			    (uint8_t *)initiator_node_name,
			    ISCSI_MAX_NAME_LEN,
			    (uint8_t *)initiator_node_alias,
			    ISCSI_MAX_NAME_LEN,
			    ISNS_INITIATOR_NODE_TYPE,
			    isns_scn_callback);

			iscsid_do_isns_query_one_server(ihp, &e);

			iscsid_addr_to_sockaddr(e.e_insize,
			    &e.e_u, e.e_port, &addr_dsc.sin);

			(void) iscsid_login_tgt(ihp, NULL,
			    iSCSIDiscoveryMethodISNS,
			    &addr_dsc.sin);

			/* Done using the name and alias - free them. */
			kmem_free(initiator_node_name, ISCSI_MAX_NAME_LEN);
			initiator_node_name = NULL;
			kmem_free(initiator_node_alias, ISCSI_MAX_NAME_LEN);
			initiator_node_alias = NULL;
		}
		break;

	/*
	 * ISCSI_DISCOVERY_ADDR_SET:
	 */
	case ISCSI_DISCOVERY_ADDR_SET:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		if (e.e_oid == ISCSI_OID_NOTSET) {
			mutex_enter(&iscsi_oid_mutex);
			e.e_oid = iscsi_oid++;
			mutex_exit(&iscsi_oid_mutex);
		}

		if (persistent_disc_addr_set(&e) == B_FALSE) {
			rtn = EIO;
			break;
		}

		/*
		 * If Send Targets discovery is enabled, then kickoff
		 * discovery of the targets advertised by the recently
		 * added discovery address.
		 */
		method = persistent_disc_meth_get();
		if (method & iSCSIDiscoveryMethodSendTargets) {

			iscsid_addr_to_sockaddr(e.e_insize,
			    &e.e_u, e.e_port, &addr_dsc.sin);
			iscsid_do_sendtgts(&e);
			(void) iscsid_login_tgt(ihp, NULL,
			    iSCSIDiscoveryMethodSendTargets,
			    &addr_dsc.sin);

		}
		break;

	/*
	 * ISCSI_DISCOVERY_ADDR_LIST_GET
	 */
	case ISCSI_DISCOVERY_ADDR_LIST_GET:
		/* copyin user args */
		if (ddi_copyin((caddr_t)arg, &ial, sizeof (ial), mode)) {
			rtn = EFAULT;
			break;
		}

		if (ial.al_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		list_space = sizeof (iscsi_addr_list_t);
		if (ial.al_in_cnt != 0) {
			list_space += (sizeof (iscsi_addr_t) *
			    (ial.al_in_cnt - 1));
		}

		ialp = kmem_zalloc(list_space, KM_SLEEP);
		bcopy(&ial, ialp, sizeof (iscsi_addr_list_t));

		void_p = NULL;
		ialp->al_out_cnt = 0;
		persistent_disc_addr_lock();
		while (persistent_disc_addr_next(&void_p, &e) == B_TRUE) {
			if (ialp->al_out_cnt < ialp->al_in_cnt) {
				int		i = ialp->al_out_cnt;
				iscsi_addr_t	*addr = &ialp->al_addrs[i];

				addr->a_port = e.e_port;
				addr->a_addr.i_insize = e.e_insize;
				addr->a_oid = e.e_oid;

				if (e.e_insize == sizeof (struct in_addr)) {
					/* IPv4 */
					addr->a_addr.i_addr.in4.s_addr =
					    e.e_u.u_in4.s_addr;
				} else if (e.e_insize ==
					    sizeof (struct in6_addr)) {
					/* IPv6 */
					bcopy(e.e_u.u_in6.s6_addr,
					    addr->a_addr.i_addr.in6.s6_addr,
					    16);
				}
			}
			ialp->al_out_cnt++;
		}
		persistent_disc_addr_unlock();

		rtn = ddi_copyout(ialp, (caddr_t)arg, list_space, mode);
		kmem_free(ialp, list_space);
		break;

	/*
	 * ISCSI_ISNS_SERVER_ADDR_LIST_GET
	 */
	case ISCSI_ISNS_SERVER_ADDR_LIST_GET:
		/* copyin user args */
		if (ddi_copyin((caddr_t)arg, &ial, sizeof (ial), mode)) {
			rtn = EFAULT;
			break;
		}

		if (ial.al_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		list_space = sizeof (iscsi_addr_list_t);
		if (ial.al_in_cnt != 0) {
			list_space += (sizeof (iscsi_addr_t) *
			    (ial.al_in_cnt - 1));
		}

		ialp = kmem_zalloc(list_space, KM_SLEEP);
		bcopy(&ial, ialp, sizeof (iscsi_addr_list_t));

		void_p = NULL;
		ialp->al_out_cnt = 0;
		persistent_isns_addr_lock();
		while (persistent_isns_addr_next(&void_p, &e) == B_TRUE) {
			if (ialp->al_out_cnt < ialp->al_in_cnt) {
				int		i = ialp->al_out_cnt;
				iscsi_addr_t	*addr = &ialp->al_addrs[i];

				addr->a_port = e.e_port;
				addr->a_addr.i_insize = e.e_insize;
				if (e.e_insize == sizeof (struct in_addr)) {
					/* IPv4 */
					addr->a_addr.i_addr.in4.s_addr =
					    e.e_u.u_in4.s_addr;
				} else if (e.e_insize ==
					    sizeof (struct in6_addr)) {
					/* IPv6 */
					bcopy(e.e_u.u_in6.s6_addr,
					    addr->a_addr.i_addr.in6.s6_addr,
					    16);
				}
			}
			ialp->al_out_cnt++;
		}
		persistent_isns_addr_unlock();

		rtn = ddi_copyout(ialp, (caddr_t)arg, list_space, mode);
		kmem_free(ialp, list_space);
		break;

	/*
	 * ISCSI_DISCOVERY_ADDR_CLEAR:
	 */
	case ISCSI_DISCOVERY_ADDR_CLEAR:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		iscsid_addr_to_sockaddr(e.e_insize,
		    &e.e_u, e.e_port, &addr_dsc.sin);

		/* If discovery in progress, try few times before return busy */
		retry = 0;
		mutex_enter(&ihp->hba_discovery_events_mutex);
		while (ihp->hba_discovery_in_progress == B_TRUE) {
			if (++retry == 5) {
				rtn = EBUSY;
				break;
			}
			mutex_exit(&ihp->hba_discovery_events_mutex);
			delay(SEC_TO_TICK(ISCSI_DISC_DELAY));
			mutex_enter(&ihp->hba_discovery_events_mutex);
		}

		/*
		 * Clear discovery address first, so that any bus config
		 * will ignore this discovery address
		 */
		if (rtn == 0 && persistent_disc_addr_clear(&e) == B_FALSE) {
			rtn = EIO;
		}
		mutex_exit(&ihp->hba_discovery_events_mutex);

		if (rtn != 0) {
			break;
		}
		/* Attempt to logout of associated targets */
		if (iscsid_del(ihp, NULL,
		    iSCSIDiscoveryMethodSendTargets, &addr_dsc.sin) ==
		    B_FALSE) {
			/* Failure!, restore the discovery addr. */
			if (persistent_disc_addr_set(&e) == B_FALSE) {
				cmn_err(CE_WARN, "Failed to restore sendtgt "
				    "discovery address after logout associated "
				    "targets failures.");
			}
			rtn = EBUSY;
		}
		break;

	/*
	 * ISCSI_ISNS_SERVER_CLEAR:
	 */
	case ISCSI_ISNS_SERVER_ADDR_CLEAR:
		if (ddi_copyin((caddr_t)arg, &e, sizeof (e), mode)) {
			rtn = EFAULT;
			break;
		} else if (e.e_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			break;
		}

		iscsid_addr_to_sockaddr(e.e_insize,
		    &e.e_u, e.e_port, &addr_dsc.sin);

		/* If discovery in progress, try few times before return busy */
		retry = 0;
		mutex_enter(&ihp->hba_discovery_events_mutex);
		while (ihp->hba_discovery_in_progress == B_TRUE) {
			if (++retry == 5) {
				rtn = EBUSY;
				break;
			}
			mutex_exit(&ihp->hba_discovery_events_mutex);
			delay(SEC_TO_TICK(ISCSI_DISC_DELAY));
			mutex_enter(&ihp->hba_discovery_events_mutex);
		}

		/*
		 * Clear isns server address first, so that any bus config
		 * will ignore any target registerd on this isns server
		 */
		if (rtn == 0 && persistent_isns_addr_clear(&e) == B_FALSE) {
			rtn = EIO;
		}
		mutex_exit(&ihp->hba_discovery_events_mutex);

		if (rtn != 0) {
			break;
		}

		/* Attempt logout of associated targets */
		if (iscsid_del(ihp, NULL, iSCSIDiscoveryMethodISNS,
		    &addr_dsc.sin) == B_FALSE) {
			/* Failure!, restore the isns server addr. */

			if (persistent_isns_addr_set(&e) == B_FALSE) {
				cmn_err(CE_WARN, "Failed to restore isns server"
				    " address after logout associated targets"
				    " failures.");
			}
			rtn = EBUSY;
		} else {
			method = persistent_disc_meth_get();
			if (method & iSCSIDiscoveryMethodISNS) {
				boolean_t is_last_isns_server_b =
				    B_FALSE;
				int isns_server_count = 0;
				void *void_p = NULL;

				/*
				 * Check if the last iSNS server's been
				 * removed.
				 */
				{
					entry_t tmp_e;
					persistent_isns_addr_lock();
					while (persistent_isns_addr_next(
					    &void_p, &tmp_e) == B_TRUE) {
						isns_server_count++;
					}
				}
				persistent_isns_addr_unlock();
				if (isns_server_count == 0) {
					is_last_isns_server_b = B_TRUE;
				}

				/*
				 * Deregister this node from this iSNS
				 * server.
				 */
				initiator_node_name = kmem_zalloc(
				    ISCSI_MAX_NAME_LEN, KM_SLEEP);
				if (persistent_initiator_name_get(
				    initiator_node_name,
				    ISCSI_MAX_NAME_LEN) == B_TRUE) {

					if (strlen(initiator_node_name) > 0) {
						(void) isns_dereg_one_server(
						    &e, (uint8_t *)
						    initiator_node_name,
						    is_last_isns_server_b);
					}
				}
				kmem_free(initiator_node_name,
				    ISCSI_MAX_NAME_LEN);
				initiator_node_name = NULL;
			}
		}
		break;

	/*
	 * ISCSI_DISCOVERY_SET -
	 */
	case ISCSI_DISCOVERY_SET:
		if (ddi_copyin((caddr_t)arg, &method, sizeof (method), mode)) {
			rtn = EFAULT;
			break;
		}

		if (persistent_disc_meth_set(method) == B_FALSE) {
			rtn = EIO;
		} else {
			(void) iscsid_enable_discovery(ihp, method, B_FALSE);
			iscsid_poke_discovery(ihp, method);
			(void) iscsid_login_tgt(ihp, NULL, method, NULL);
		}
		break;

	/*
	 * ISCSI_DISCOVERY_GET -
	 */
	case ISCSI_DISCOVERY_GET:
		method = persistent_disc_meth_get();
		rtn = ddi_copyout(&method, (caddr_t)arg,
		    sizeof (method), mode);
		break;

	/*
	 * ISCSI_DISCOVERY_CLEAR -
	 */
	case ISCSI_DISCOVERY_CLEAR:
		if (ddi_copyin((caddr_t)arg, &method, sizeof (method), mode)) {
			rtn = EFAULT;
			break;
		}

		/* If discovery in progress, try few times before return busy */
		retry = 0;
		mutex_enter(&ihp->hba_discovery_events_mutex);
		while (ihp->hba_discovery_in_progress == B_TRUE) {
			if (++retry == 5) {
				rtn = EBUSY;
				break;
			}
			mutex_exit(&ihp->hba_discovery_events_mutex);
			delay(SEC_TO_TICK(ISCSI_DISC_DELAY));
			mutex_enter(&ihp->hba_discovery_events_mutex);
		}

		/*
		 * Clear discovery first, so that any bus config or
		 * discovery requests will ignore this discovery method
		 */
		if (rtn == 0 && persistent_disc_meth_clear(method) == B_FALSE) {
			rtn = EIO;
		}
		mutex_exit(&ihp->hba_discovery_events_mutex);

		if (rtn != 0) {
			break;
		}

		/* Attempt to logout from all associated targets */
		if (iscsid_disable_discovery(ihp, method) == B_FALSE) {
			/* Failure!, reset the discovery */
			if (persistent_disc_meth_set(method) == B_FALSE) {
				cmn_err(CE_WARN, "Failed to reset discovery "
				    "method after discovery disable failure.");
			}
			rtn = EBUSY;
		}
		break;

	/*
	 * ISCSI_DISCOVERY_PROPS -
	 */
	case ISCSI_DISCOVERY_PROPS:
		iscsid_props(&discovery_props);
		if (ddi_copyout(&discovery_props, (caddr_t)arg,
		    sizeof (discovery_props), mode))
			rtn = EFAULT;
		break;

	/*
	 * ISCSI_LUN_OID_LIST --
	 */
	case ISCSI_LUN_OID_LIST_GET:
		ll = (iscsi_lun_list_t *)kmem_alloc(sizeof (*ll), KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, ll, sizeof (*ll), mode)) {
			rtn = EFAULT;
			kmem_free(ll, sizeof (*ll));
			break;
		}

		if (ll->ll_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(ll, sizeof (*ll));
			break;
		}

		/*
		 * Find out how much space the user has allocated in their
		 * structure. Match the same space for our structure.
		 */
		lun_sz = sizeof (iscsi_lun_list_t);
		if (ll->ll_in_cnt > 0) {
			lun_sz += (ll->ll_in_cnt - 1) * sizeof (iscsi_if_lun_t);
		}

		llp = kmem_zalloc(lun_sz, KM_SLEEP);
		bcopy(ll, llp, sizeof (*ll));
		kmem_free(ll, sizeof (*ll));

		/*
		 * Check to see if oid references a target-param oid.  If so,
		 * find the associated  session oid before getting lu list.
		 */
		if (iscsi_targetparam_get_name(llp->ll_tgt_oid) != NULL) {
			for (isp = ihp->hba_sess_list; isp;
			    isp = isp->sess_next) {
				if (isp->sess_target_oid == llp->ll_tgt_oid) {
					target_oid  = isp->sess_oid;
					break;
				}
			}
		} else {
			target_oid = llp->ll_tgt_oid;
		}


		/*
		 * Look at the LUNs attached to the specified target. If there
		 * is space in the user structure save that information locally.
		 * Always add up the count to the total. By always adding
		 * the count this code can be used if ll_in_cnt == 0 and
		 * the user just wishes to know the appropriate size to
		 * allocate.
		 */
		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		for (isp = ihp->hba_sess_list; isp; isp = isp->sess_next) {
			if ((llp->ll_all_tgts == B_FALSE) &&
			    (isp->sess_oid != target_oid)) {
				continue;
			}
			rw_enter(&isp->sess_lun_list_rwlock, RW_READER);
			for (ilp = isp->sess_lun_list; ilp;
			    ilp = ilp->lun_next) {
				if ((ilp->lun_state &
				    ISCSI_LUN_STATE_ONLINE) &&
				    !(ilp->lun_state &
				    ISCSI_LUN_STATE_INVALID)) {
					if (llp->ll_out_cnt <
					    llp->ll_in_cnt) {
						iscsi_if_lun_t *lp;
						lp = &llp->ll_luns[
						    llp->ll_out_cnt];

						lp->l_tgt_oid =
						    isp->sess_oid;
						lp->l_oid = ilp->lun_oid;
						lp->l_num = ilp->lun_num;
					}
				llp->ll_out_cnt++;
				}
			}
			rw_exit(&isp->sess_lun_list_rwlock);
		}
		rw_exit(&ihp->hba_sess_list_rwlock);

		if (ddi_copyout(llp, (caddr_t)arg, lun_sz, mode)) {
			rtn = EFAULT;
		}

		kmem_free(llp, lun_sz);
		break;

	/*
	 * ISCSI_LUN_PROPS_GET --
	 */
	case ISCSI_LUN_PROPS_GET:
		lun = (iscsi_lun_props_t *)kmem_zalloc(sizeof (*lun), KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, lun, sizeof (*lun), mode)) {
			rtn = EFAULT;
			kmem_free(lun, sizeof (*lun));
			break;
		}

		if (lun->lp_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(lun, sizeof (*lun));
			break;
		}

		/*
		 * For the target specified, find the LUN specified and
		 * return its properties
		 */
		rw_enter(&ihp->hba_sess_list_rwlock, RW_READER);
		rtn = iscsi_sess_get(lun->lp_tgt_oid, ihp, &isp);
		if (rtn != 0) {
			rw_exit(&ihp->hba_sess_list_rwlock);
			rtn = EFAULT;
			kmem_free(lun, sizeof (*lun));
			break;
		}
		rtn = EINVAL;	/* Set bad rtn, correct only if found */
		rw_enter(&isp->sess_lun_list_rwlock, RW_READER);
		for (ilp = isp->sess_lun_list; ilp; ilp = ilp->lun_next) {
			if (ilp->lun_oid == lun->lp_oid) {
				lun->lp_num	= ilp->lun_num;
				lun->lp_status	= LunValid;
				lun->lp_time_online = ilp->lun_time_online;

				if (ilp->lun_pip != NULL) {
					lun_dip = mdi_pi_get_client(
					    ilp->lun_pip);
				} else {
					lun_dip = ilp->lun_dip;
				}

				if (lun_dip != NULL &&
				    ((i_ddi_devi_attached(lun_dip)) ||
				    (ddi_get_devstate(lun_dip) ==
				    DDI_DEVSTATE_UP))) {
					(void) ddi_pathname(lun_dip,
					    lun->lp_pathname);
				} else {
					/*
					 * The LUN is not exported to the
					 * OS yet.  It is in the process
					 * of being added.
					 */
					lun->lp_status	= LunDoesNotExist;
				}
				bcopy(ilp->lun_vid, lun->lp_vid,
				    sizeof (lun->lp_vid));
				bcopy(ilp->lun_pid, lun->lp_pid,
				    sizeof (lun->lp_pid));
				rtn = ddi_copyout(lun, (caddr_t)arg,
				    sizeof (*lun), mode);
				if (rtn == -1) {
					rtn = EFAULT;
				}
				break;
			}
		}
		rw_exit(&isp->sess_lun_list_rwlock);
		rw_exit(&ihp->hba_sess_list_rwlock);

		kmem_free(lun, sizeof (*lun));
		break;

	/*
	 * ISCSI_CONN_OID_LIST_GET --
	 */
#define	ISCSIIOCOLGC iscsi_ioctl_conn_oid_list_get_copyout
	case ISCSI_CONN_OID_LIST_GET:
		{
			iscsi_conn_list_t	*cl;

			/* Asuume the worst */
			rtn = EFAULT;

			/* Copy the input argument into kernel world. */
			cl = iscsi_ioctl_conn_oid_list_get_copyin(
			    (caddr_t)arg,
			    mode);
			if (cl != NULL) {
				if (iscsi_ioctl_conn_oid_list_get(ihp, cl) ==
				    B_TRUE) {
					rtn =
					    ISCSIIOCOLGC(
					    cl, (caddr_t)arg, mode);
				}
			}
			break;
		}
#undef ISCSIIOCOLGC
	/*
	 * ISCSI_CONN_OID_LIST_GET --
	 */
	case ISCSI_CONN_PROPS_GET:
		{
			iscsi_conn_props_t	*cp;

			/* Asuume the worst */
			rtn = EFAULT;

			/* Copy the input argument into kernel world. */
			cp = iscsi_ioctl_copyin(
			    (caddr_t)arg,
			    mode,
			    sizeof (iscsi_conn_props_t));

			if (cp != NULL) {
				/* Get the propereties. */
				if (iscsi_ioctl_conn_props_get(ihp, cp) ==
				    B_TRUE) {
					rtn =
					    iscsi_ioctl_copyout(
					    cp,
					    sizeof (*cp),
					    (caddr_t)arg,
					    mode);
				} else {
					kmem_free(cp, sizeof (*cp));
					cp = NULL;
				}
			}
			break;
		}

	/*
	 * ISCSI_RADIUS_GET -
	 */
	case ISCSI_RADIUS_GET:
	{
		iscsi_nvfile_status_t	status;

		radius = (iscsi_radius_props_t *)kmem_zalloc(sizeof (*radius),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, radius, sizeof (*radius), mode)) {
			kmem_free(radius, sizeof (*radius));
			rtn = EFAULT;
			break;
		} else if (radius->r_vers != ISCSI_INTERFACE_VERSION) {
			kmem_free(radius, sizeof (*radius));
			rtn = EINVAL;
			break;
		}

		old_oid = radius->r_oid;

		if (radius->r_oid == ihp->hba_oid) {
			name = ihp->hba_name;
		} else {
			/*
			 * RADIUS configuration should be done on a per
			 * initiator basis.
			 */
			kmem_free(radius, sizeof (*radius));
			rtn = EINVAL;
			break;
		}

		status = persistent_radius_get(radius);
		if (status == ISCSI_NVFILE_SUCCESS) {
			/*
			 * Restore the value for overridden (and bogus) oid.
			 */
			radius->r_oid = old_oid;
			rtn = ddi_copyout(radius, (caddr_t)arg,
			    sizeof (*radius), mode);
		} else if (status == ISCSI_NVFILE_NAMEVAL_NOT_FOUND) {
			rtn = ENOENT;
		} else {
			rtn = EIO;
		}
		kmem_free(radius, sizeof (*radius));
		break;
	}

	/*
	 * ISCSI_RADIUS_SET -
	 */
	case ISCSI_RADIUS_SET:
		radius = (iscsi_radius_props_t *)kmem_zalloc(sizeof (*radius),
		    KM_SLEEP);
		if (ddi_copyin((caddr_t)arg, radius, sizeof (*radius), mode)) {
			rtn = EFAULT;
			kmem_free(radius, sizeof (*radius));
			break;
		} else if (radius->r_vers != ISCSI_INTERFACE_VERSION) {
			rtn = EINVAL;
			kmem_free(radius, sizeof (*radius));
			break;
		}

		if (