<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2722" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff
size=2></FONT> </DIV><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Renato Recio [mailto:recio@us.ibm.com]
<BR><B>Sent:</B> Friday, November 11, 2005 11:01 AM<BR><B>To:</B> Caitlin
Bestler<BR><B>Cc:</B> Kanevsky, Arkady; dat-discussions@yahoogroups.com; Sean
Hefty; openib-general@openib.org; swg@infinibandta.org<BR><B>Subject:</B> Re:
[swg] RE: [openib-general] RE: [dat-discussions] socket based connectionmodel
for IB proposal - round 3<BR></FONT><BR></DIV>
<DIV></DIV>
<P>The CM cannot get a message from a non-priviliged requestor, because a
non-privilited requestor cannot insert the priviliged Q_Key into the
packet.<BR><BR><BR><SPAN class=994210619-11112005><FONT face=Arial
color=#0000ff size=2></FONT></SPAN></P>
<P><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </P></BLOCKQUOTE>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>But a non-privileged remote consumer could make a request of an
existing CM.</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>That existing CM would consider the entire "private data" field to be,
well, private.</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>It would obviously not validate any of it.</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005></SPAN> </DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>So getting the Q_Key does not guarantee that the private data is
validated.</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>There has to be a field outside of the private data that can only be
set by</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>privileged codes that means "I am aware of the expectation that I
have</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>validated the standardized portion of the private data in this optional
format."</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005></SPAN> </DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>And yes, the Q-Key is how we know that assertion is coming
from privileged</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005><FONT face=Arial color=#0000ff
size=2>remote software.</FONT></SPAN></DIV>
<DIV dir=ltr><SPAN class=994210619-11112005> </SPAN></DIV></BODY></HTML>