[Lustre-devel] security: MGS connection

[Eric Barton]

> > It's OK if the MGS will reject any connection attempt with insufficient
> > security.  In that case, you could put the security in the mount option
> > and it should probably be an error to specify different levels of security
> > when talking to the same MGS.
> 
> I guess there's misunderstanding. The problem is not on MGS, it's on 
> MGC. Each node have only one MGC, thus only one ptlrpc connection to 
> MGS, which is shared by _all_ Lustre components live on this node. So in 
> case of mounting 2 OSTs on a single node, only one security flavor could 
> be used.

Yes - I didn't make myself clear enough.  I grok there is only 1 MGC and I
suggest we report an error if the MGC has already established a connection
with insufficient security for a subsequent mount because this reveals an
inconsistency.

    Cheers,
              Eric