(racoon 741) Re: payload 129 (gss id)

Nathan,

I'm not familiar with GSS but I would think that Windows relies on this 
protocol, so ignoring the payload will probably not help. You can either 
try to disable this requirement on the Windows side or recompile racoon 
with GSSAPI support. The Mac OS X racoon is built without GSSAPI 
(otherwise you wouldn't get the error message below).

Hope this helps.

Frederik


Nathan Herring wrote:
> I am trying to set up IPSec on my Mac OS X 10.3.5 machine using Kerberos
> authentication (ActiveDirectory as KDC). I'm connecting from my Windows XP
> SP2 machine as a test. The Windows box is set to try IPSec and failover to
> IP (AKA Request Mode).
> 
> Running racoon (20001216) in the foreground with log=debug, the negotiation
> fails when XP sends the second packet, which contains KE(4), NONCE(10), and
> GSS ID(129). The actual error is...
> 
> ERROR: isakmp_ident.c:1038:ident_r2recv(): ignore the packet, received
> unexpecting payload type 129.
[...]