Description of problem:

Best practice and secure iSCSI deployment uses mutual authentication with separate username and passwords for each LUN that is different from the DISCOVERY credentials.

In other words, ovirt needs the following UI and support

------DISCOVERY phase------

Optional Outbound credentials:

username:
password:

Optional inbound (mutual) credentials:

username:
password:


-------Then for EACH LUN, allow credentials to be input --------

Optional  Outbound credentials:

username:
password:

Optional inbound (mutual) credentials:

username:
password:

------------------------------------------------------------------

RHEL6 Anaconda gets this treatment of iSCSI authentication correct (it was broken similar to ovirt in RHEL5).