Re: Security Use Requirements

[David Robinson <David.Robinson@EBay.Sun.COM>]

Bernard Aboba wrote:
> >iSCSI envisions and allows multiple targets behind a single IP
> >address and TCP port.  The targets are named (via WWUIs) in a
> >fashion that neither IPsec nor TLS can be expected to understand
> 
> Let me make sure I understand this. You will have multiple
> SCSI authentications to the same target IP address and port.
> Does the initiator port vary between them or is that the
> same too?

I haven't heard anyone strongly request this. Hopefully
another body will handle this within the SCSI layer.  If
there is demand I would suggest looking at how the NFSv4 WG
handled this using GSSAPI.  But I personally think that is
overkill for iSCSI.

	-David