Return-Path: <owner-ips@ece.cmu.edu>
X-Sieve: cmu-sieve 2.0
Return-Path: <owner-ips@ece.cmu.edu>
Received: (from majordom@localhost)
	by ece.cmu.edu (8.11.0/8.10.2) id h0FHHUZ27424
	for ips-outgoing; Wed, 15 Jan 2003 12:17:30 -0500 (EST)
X-Authentication-Warning: ece.cmu.edu: majordom set sender to owner-ips@ece.cmu.edu using -f
Received: from cygnus.equallogic.com (cygnus.equallogic.com [65.170.102.10])
	by ece.cmu.edu (8.11.0/8.10.2) with SMTP id h0FH1lW26458;
	Wed, 15 Jan 2003 12:01:47 -0500 (EST)
Received: from cygnus.equallogic.com (localhost.localdomain [127.0.0.1])
	by cygnus.equallogic.com (8.11.6/8.11.6) with ESMTP id h0FH1gq31847;
	Wed, 15 Jan 2003 12:01:42 -0500
Received: from deneb.dev.equallogic.com (deneb.dev.equallogic.com [172.16.1.99])
	by cygnus.equallogic.com (8.11.6/8.11.6) with ESMTP id h0FH1fd31838;
	Wed, 15 Jan 2003 12:01:41 -0500
Received: from PKONING.equallogic.com (localhost.localdomain [127.0.0.1])
	by deneb.dev.equallogic.com (8.11.6/8.11.6) with ESMTP id h0FH1fH07985;
	Wed, 15 Jan 2003 12:01:41 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15909.41469.609000.358711@gargle.gargle.HOWL>
Date: Wed, 15 Jan 2003 13:01:33 -0500
From: Paul Koning <pkoning@equallogic.com>
To: Julian_Satran@il.ibm.com
Cc: ips@ece.cmu.edu, owner-ips@ece.cmu.edu
Subject: Re: UNH Plugfest 5
References: <15909.34800.713734.598461@pkoning.dev.equallogic.com>
	<OF11DD9736.FAF538B9-ONC2256CAF.005AF962-C2256CAF.005CC51E@telaviv.ibm.com>
X-Mailer: VM 7.07 under 21.4 (patch 10) "Military Intelligence (Windows)" XEmacs Lucid
Sender: owner-ips@ece.cmu.edu
Precedence: bulk

>>>>> "Julian" == Julian Satran <Julian_Satran@il.ibm.com> writes:

 Julian> Paul, The aim of the standard is to create interoperale
 Julian> protocols not administrators.  An administrator may cause
 Julian> initiators and target NOT TO interoperate in a myriad of
 Julian> ways.

 Julian> The basic assumptions for the whole security setup is that
 Julian> the administrator will set them so that they can intemperate
 Julian> and the standard setter provides him with the means to do so.

 Julian> Your assumption that initiators and target should be able to
 Julian> interoperate regardless of their administrative entities is
 Julian> not what standards do.

So obviously we have a difference of opinion, because in my experience
this IS what standards must do, have done in the past, and should
continue to do in the future.

But since you disagree, I guess the standard will remain the way it
is.  So I'll read between the lines and consider the consequences of
this.  It amounts to:

1. Initiators are allowed to insist that targets do a full
   authentication before they issue a redirect.
2. Targets are not required to implement this.
3. However, if you want to build a target that works with initiators
   that do (1), you DO have to implement this.  You don't need it for
   conformance but you do need it for interoperability with initiators
   of type (1).

Is this what the WG wants to do?  In other words, the message to Bob
Russell is "yes, this interoperability issue is intentional"?

	paul
