[31187] in Kerberos
Re: Racoon ipsec configuration with GSSAPI/kerberos
daemon@ATHENA.MIT.EDU (T. M. Pederson)
Wed May 27 05:06:21 2009
Mime-Version: 1.0
From: tmp+rnpc@echo.disfinite.org (T. M. Pederson)
Date: Tue, 26 May 2009 05:55:44 -0500
Message-ID: <geuse6-7fp.ln1@echo.disfinite.org>
X-Complaints-To: abuse@iphouse.net
To: kerberos@mit.edu
Reply-To: tmp+rnpc@disfinite.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
In article <mailman.125.1243323208.9729.kerberos@mit.edu>,
Anandan <anandhm_psg@yahoo.com> writes:
[...]
> Thanks for the information. I think this case will work between two linux
> machines.
> Is it possible to configure racoon with kerberos between a linux machine and
> a windows machine??
According to the documentation it's certainly possible. I don't
have access to any MS-Windows machines to offer much of any tips.
I will note, however, that while Racoon is capable of two gssapi id
encodings, MS-Windows can only handle one. Racoon is supposed to
default to using the same one that MS-Windows does, but if for some
reason it doesn't, explicitly set it in the general section of your
racoon.conf:
gss_id_enc utf-16le;
--
T. M. Pederson <tmp+rnpc@disfinite.org>
GPG key fingerprint = FFAF D056 F12B E03F 7084 1288 EF8B E1FE 1693 21EB
+Accept: text/plain; charset=ISO-8859-*,UTF-*
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos