Subject: [Ips] Authentication

From: "Smitha Narayanaswamy \(smithan\)" <[email-masked]>
Date: Fri, 6 May 2005 17:58:34 +0530

Hi,

Is the authentication phase mandatory as per the RFC?
Also, can you have only target authentication with no initiator
authentication?

The RFC seemed contradictory when we have:
"
3.2.3.  iSCSI Login
<...>
   As part of the login process, the initiator and target SHOULD
   authenticate each other and MAY set a security association protocol
   for the session.  This can occur in many different ways and is
   subject to negotiation.
"
and
"
5.3.  Login Phase
<...>
   In some environments, a target or an initiator is not interested in
   authenticating its counterpart.  It is possible to bypass
   authentication through the Login Request and Response.
"
and
"
8.2.  In-band Initiator-Target Authentication

   During login, the target MAY authenticate the initiator and the
   initiator MAY authenticate the target.  The authentication is
   performed on every new iSCSI connection by an exchange of iSCSI
Login
   PDUs using a negotiated authentication method.
"

Thanks,
Smitha

_______________________________________________
Ips mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ips