(racoon 650) Hybrid Auth/XAuth patches

Hello

I'd like racoon to interoperate with the Cisco VPN client (aka the Unity 
VPN client) in hybrid authentication mode. This involve implementing a 
few extensions to ISAKMP:
draft-ietf-ipsec-isakmp-mode-cfg-04.txt
draft-ietf-ipsec-isakmp-xauth-06.txt
draft-ietf-ipsec-isakmp-hybrid-auth-05.txt

After a few days of work, I added enough functionnality to get the 
login/password from the client and validate it. Now I have to send the 
network configuration to the client and I will be able to use racoon as
the VPN network server for the Cisco VPN client.

How can I get my work integrated? Is there a KAME developper that can 
help me polishing my patches and commit them?

There are a few isssues outstanding:
- how to validate the login/password? For now I just make a strcmp against
a hardcoded value, I plan to check against the system password database,
but external authentication sources could be usefull. Is it something
reasonable to add a RADIUS client capability to racoon? 

- how to get the network configuration that is sent to the client? I can
add config file directives, but maybe it could be desirable to ask a DHCP
server? Is a DHCP client capability something reasonnable?

- For now I just implemented code to behave as a server, but code to 
behave as a client would be nice for people that have to connect to 
VPN using IPsec + XAuth. It shouldn't be too hard to configure.

-- 
Emmanuel Dreyfus
[email protected]