Subject: RE: [eap] Issue: EAP Key Manglement Terminology

From: "Salowey, Joe" <[email-masked]>
Date: Tue, 1 Nov 2005 09:42:54 -0800

> >"The EAP server also decides whether access to some service 
> should be 
> >granted"??? Isn't this the job of AAA server?
> 
> The actual quotation is:
> 
>    The EAP server also
>    stores the peer's identity and/or other information necessary to
>    decide whether access to some service should be granted.
> 
> So yes, the AAA server makes the decision, but the EAP server 
> stores the information.
>
[Joe] This text is a bit vague. Does this section mean the EAP server
stores the peer's authenticated identity after the EAP method has
executed or are you referring to a more persistent storage of identity?
The EAP server is primarily responsible for providing authenticated
identity, it may provide additional information authenticated during the
EAP transaction, but it certainly is not the only source for additional
information about the identity and context of the access. 

> 
> _______________________________________________
> eap mailing list
> [email-masked]
> http://mail.frascone.com/mailman/listinfo/eap
> 
_______________________________________________
eap mailing list
[email-masked]
http://mail.frascone.com/mailman/listinfo/eap