eap Mailing List: RE: Strawman -10/EMSK deletion requirement?

[Avi Lior (avi]

Joe,
 

> -----Original Message-----
> From: Salowey, Joe [mailto:jsalowey [at] cisco.com] 
> Sent: Friday, March 10, 2006 12:16 AM
> To: Avi Lior; Narayanan, Vidya; Jari Arkko
> Cc: eap [at] frascone.com
> Subject: RE: [eap] Strawman -10/EMSK deletion requirement?
> 
>  
> 
> > -----Original Message-----
> > From: Avi Lior [mailto:avi [at] bridgewatersystems.com]
> > Sent: Thursday, March 09, 2006 9:03 PM
> > To: Salowey, Joe; Narayanan, Vidya; Jari Arkko
> > Cc: eap [at] frascone.com
> > Subject: RE: [eap] Strawman -10/EMSK deletion requirement?
> > 
> > Joe and All,
> > 
> > I totally agree with Joe.
> > 
> > AAA is a protocol that transports and cant realy cache 
> anything in the 
> > case of RADIUS which is stateless.
> > 
> > So any caching has to be outside AAA or with AAA (but 
> Diameter only). 
> 
> [Joe] I think a AAA server is typically composed of several 
> components.
> One of these can be a key holder.  I don't see why you 
> couldn't define new functionality in RADIUS to interact with 
> the key holder (other than the fact that it seems to be 
> difficult to define anything new in RADIUS). 

[Avi]  Aboslutely correct on all fronts ;-).  A AAA server can have
EAP-AS (authetncation server) and a key holder/key generator.  So I
guess ia m being very formal in the sense that AAA is a protocol and not
a server.

And BTW I don't think we need to have an RFC to define a Key Holder
function in RADIUS servers.
 
> > 
> > > -----Original Message-----
> > > From: Salowey, Joe [mailto:jsalowey [at] cisco.com]
> > > Sent: Thursday, March 09, 2006 11:59 PM
> > > To: Narayanan, Vidya; Avi Lior; Jari Arkko
> > > Cc: eap [at] frascone.com
> > > Subject: RE: [eap] Strawman -10/EMSK deletion requirement?
> > > 
> > >  
> > > 
> > > > 
> > > > I guess when you say EAP Authentication Server, it is a 
> bit vague 
> > > > about whether that is the EAP layer or AAA layer. I'm 
> not sure if 
> > > > there is value in clarifying this or if it makes more sense
> > > to leave
> > > > it to implementation.
> > > >
> > > [Joe] I'm pretty convinced it is in EAP.  In the pictures the AAA 
> > > layer appears to carry communication between AAA client and AAA 
> > > server, I do not think this is where the EMSK belongs.
> > > 
> > >  
> > > 
> > 
>