Subject: Re: racoon, gss-api auth, and win2k IPSec IKE ...
To: Ken Hornstein <>
From: Jason R Thorpe <>
List: tech-net
Date: 06/07/2002 15:45:11
On Fri, Jun 07, 2002 at 05:55:18PM -0400, Ken Hornstein wrote:

 > One thing that comes to mind is that win2k GSSAPI generally uses SPNEGO,
 > and I believe Heimdal at that time didn't support it.

No, it was definitely using Kerberos ... there was a vendor name
string we weren't getting right at the time, as well (but I think
I fixed that in racoon -- I can't remember right now :-)

        -- Jason R. Thorpe <>