Subject: Re: draft-eisler-nfsv4-ccm-00.txt

From: Mike Eisler <[email-masked]>
Date: Thu, 27 Feb 2003 17:32:25 -0800 (PST)

> From: Nicolas Williams [mailto:[email-masked]]
> 
> I'm not even sure that a new GSS mechanism is even necessary.  Can't
> NFSv4 negotiate the use or non-use of GSS-API integrity/privacy
> services?  I think so.  So perhaps all that is needed is for 

Yes. That's what started me this direction (or rather
Dave Noveck's observation of the same thing a couple months ago).

But there is still per RPC overhead. CCM eliminates
all the overhead per RPC.

> the server
> to force the non-use of GSS-API integrity/privacy services 
> when IPsec is
> in use between it and the client, and for the client to not 
> bother with
> GSS-API integrity/privacy in initial context establishment 
> attempts when
> IPsec is in use between it and the client.
> 
> Cheers,
> 
> Nico
> -- 
>