Hi Jonathan!

  I saw your posting on tech_net on NETBSD. Currently I am trying to 
establish IPSEC connection between NetBSD machine and Win2k server, using 
gssapi authentication for ike. I have few questions. I would greatly 
appreciate, if you could clarify.

Iam using win2k server as domain controller with KDC.

I have created a user on windows, for netbsd and got a kerberos ticket 
during login. It does not work the right way I think.Because when I tried to 
login with the user name i have created for netbsd, it says checksum type 
error, but when I use kinit to aasign a password,it gets a ticket and 
principle name for that user.

my questions are

1. Do I have to use this principle name as gssapi id in proposal in 
racoon.conf?

2. How to get rid of the check sum type error for getting kerberos ticket 
during login.


If you could share your  experience of trying netbsd with win2k, using gss 
api authentication, I will be greatful.

Thanks

kamakshi.




_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com