Subject: [Ips] Authentication

From: [email-masked]
Date: Fri, 7 Nov 2003 12:08:53 -0700

I just noticed a contradiction between 8.2 and 11.1

8.2 says: "During login, the target MUST authenticate the initiator and the
initiator MAY authenticate the target."
which is saying that authentication must be used on each login to authenticate the initiator.

11.1 says: "Authentication is OPTIONAL to use but MUST be supported by the target and initiator."
which is saying that authentication does not have to be used on every login.  An AuthMeth key of None is defined which is consistant with this. Other material in 11.1 indicates that when authentication is done the the initiator is always authenticated and the target MAY be authenticated.

5.3 is consistant with 11.1 since it says that the Login Phase MAY include a SecurityNegotiation Phase.

Pat

_______________________________________________
Ips mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ips