Re: iSCSI: security conflict

[Stephen Bailey <steph@cs.uchicago.edu>]

> Comments anyone?

The `initiator MUST NOT send parameters other than security in the
login command' prohibition means that the intiator must not send
operation parameters in the login command when security is being
turned on.  In this case, identity parameters (initiator name & target
name), and the set of supported mechanisms are considered to be
security parameters.

This is to ensure that operational parameter negotiation is secured.

It does not say that ALL security `parameters' (including those used
for the actual security mechanism establishment) must ONLY be sent in
the login command.  Once a security mode has been chosen, negotiation
happens with text commands.

Steph