Currently I am trying to establish IPSEC connection between NetBSD machine 
and Win2k server, using gssapi authentication for ike. I have few questions. 
I would greatly appreciate, if any one could clarify.

Iam using win2k server as domain controller with KDC.

I have created a user on windows, for netbsd and got a kerberos ticket 
during login. It does not work the right way I think.Because when I tried to 
login with the user name i have created for netbsd, it says checksum type 
error, but when I use kinit to aasign a password,it gets a ticket and 
principle name for that user.

my questions are

1. Do I have to use this principle name as gssapi id in proposal in 
racoon.conf?

2. How to get rid of the check sum type error for getting kerberos ticket 
during login.


If you could share your  experience of trying netbsd with win2k, using gss 
api authentication, I will be greatful.


Thanks

kamakshi.








_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com