Subject: Re: racoon, gss-api auth, and win2k IPSec IKE ...
To: Jason R Thorpe <thorpej@wasabisystems.com>
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
List: tech-net
Date: 06/07/2002 17:55:18
>On Thu, Jun 06, 2002 at 06:44:55PM -0700, Jonathan Stone wrote:
>
> > PS: mucho thanks to Frank and Zembu for adding the GSSAPI hooks to racoon.
>
>FWIW, Zembu used GSSAPI'ified racoon between NetBSD machines heavily.  I
>did test it against win2k back then, but I never got it to work, and never
>had time to chase down all the problems.

One thing that comes to mind is that win2k GSSAPI generally uses SPNEGO,
and I believe Heimdal at that time didn't support it.

--Ken