Re: iSCSI: PAK: an alternative to SRP and DH-CHAP

["Bernard Aboba" <bernard_aboba@hotmail.com>]

>From my understaning of PAK, I don't see a way of plugging this into
>a legacy RADIUS environment (I don't have the password avail at the
>iSCSI endpoint, only the ability to say please authenticate this for >me)

The  RADIUS argument is a red herring. RFC 2869 defines the use of 
extensible authentication within RADIUS, and most RADIUS servers (including 
versions of FreeRADIUS) now support this. So the bottom line is the iSCSI 
should choose the authentication algorithms most appropriate to its needs 
and not worry about RADIUS compatibility.


_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com