[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: New XAUTH draft
On Thu, 20 May 1999 12:45:41 EDT you wrote
>
> The only way XAUTH reduces the existing authentication of IKE is if
> the sysadmin use pre-shared key authentication and share it everywhere
> or set it to null (if that's even possible).
But this is precisely the way it's used. If you had a pre-shared key bound
to a specific user (as opposed to a group) or if you had a certificate
binding a specific user to a public key then there would be no need for
XAUTH. Any subsequent radius/tacacs/whatever method of authentication
would be pointless.
Dan.
Follow-Ups:
References: