Subject: Re: racoon, gss-api auth, and win2k IPSec IKE ...
To: Jason R Thorpe <>
From: Ken Hornstein <>
List: tech-net
Date: 06/07/2002 17:55:18
>On Thu, Jun 06, 2002 at 06:44:55PM -0700, Jonathan Stone wrote:
> > PS: mucho thanks to Frank and Zembu for adding the GSSAPI hooks to racoon.
>FWIW, Zembu used GSSAPI'ified racoon between NetBSD machines heavily.  I
>did test it against win2k back then, but I never got it to work, and never
>had time to chase down all the problems.

One thing that comes to mind is that win2k GSSAPI generally uses SPNEGO,
and I believe Heimdal at that time didn't support it.