>>How bad is it on SPARC or Alpha?
>	the following result is for compilation without kerberos
>	(= no IKE with GSSAPI support).

	of course, another option is to put racoon under /usr/sbin,
	and accept the following drawbacks:
	- /usr has to be locally mounted, or
	- /usr has to be nfs mounted insecurely during bootstrap.
	  (after /usr got mounted, we can negotiate key by using
	  /usr/sbin/racoon)

itojun