RE: Security Use Requirements

["Bernard Aboba" <aboba@internaut.com>]

>> >iSCSI envisions and allows multiple targets behind a single IP
>> >address and TCP port.  The targets are named (via WWUIs) in a
>> >fashion that neither IPsec nor TLS can be expected to understand
> 
>> Let me make sure I understand this. You will have multiple
>> SCSI authentications to the same target IP address and port.
>> Does the initiator port vary between them or is that the
>> same too?

>I haven't heard anyone strongly request this. Hopefully
>another body will handle this within the SCSI layer.  If
>there is demand I would suggest looking at how the NFSv4 WG
>handled this using GSSAPI.  But I personally think that is
>overkill for iSCSI.

Are you saying that we *don't* need to worry about multiple
SCSI authentications to the same target IP address and port?
That would certainly simplify things.