summaryrefslogtreecommitdiff
path: root/crypto/dist/ipsec-tools/src/racoon/samples/racoon.conf.sample-gssapi
blob: 09c4df1d62a152fe94057eb8d60343813c4be15f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# $KAME: racoon.conf.sample-gssapi,v 1.5 2001/08/16 06:33:40 itojun Exp $

# sample configuration for GSSAPI authentication (basically, Kerberos).
# doc/README.gssapi gives some idea on how to configure it.
# TODO: more documentation.

#listen {
#	strict_address;
#}

# Uncomment the following for GSS-API to work with older versions of
# racoon that (incorrectly) used ISO-Latin-1 encoding for the GSS-API
# identifier attribute.
#gss_id_enc latin1;

remote anonymous {
	exchange_mode main;

	lifetime time 24 hour;

	proposal {
		encryption_algorithm 3des;
		hash_algorithm sha1;
		authentication_method gssapi_krb;
		# The default GSS-API ID is "host/hostname", where
		# hostname is the output of the hostname(1) command.
		# You probably want this to match your system's host
		# principal.  ktutil(8)'s "list" command will list the
		# principals in your system's keytab.  If you need to,
		# you can change the GSS-API ID here.
		#gss_id "host/some.host.name";

		dh_group 1;
	}
}

sainfo anonymous {
	lifetime time 2 hour;

	encryption_algorithm rijndael, 3des;
	authentication_algorithm hmac_sha1, hmac_md5;
	compression_algorithm deflate;
}
an title='2019-12-09 16:06:19 +0000'>2019-12-09dm: Silence aprint_normal() in dm_target_linear_status()tkusumi 2019-12-08dm: Refactor target's ->init() i/ftkusumi 2019-12-07dm: Fix strange pointer declarationstkusumi 2019-12-06dm: Remove trailing whitespacetkusumi 2019-12-05dm: Make dm core set config to NULL after destroytkusumi 2019-12-03dm: Include <sys/vnode.h> in dm.htkusumi 2019-12-02dm: Remove misleading comment on linear target argtkusumi 2019-12-01dm: Remove unused dm_dev::dev_typetkusumi 2019-10-15convert more KM_NOSLEEP to KM_SLEEP and remove code to handle failures.chs 2018-01-05PR/52900: Tomohiro Kusumi: Fix kernel panic when target's ->init() failedchristos 2017-06-04more dependiences -> dependenciesmbalmer 2017-06-01remove checks for failure after memory allocation calls that cannot fail:chs 2014-06-14Change dk_lookup() to return an anonymous vnode not associated withhannken 2011-10-14Change the vnode locking protocol of VOP_GETATTR() to request at leasthannken 2010-12-23make dm aware of physical sector sizes.mlelstv 2010-11-15curlwp needs sys/lwp.h.uebayasi 2010-05-18Add support for DIOCCACHESYNC ioctl for dm devices. Add new sync functionhaad 2010-01-04Indent files remove unnecessary blank lines, white spaces and KNFize code.haad 2009-12-01Revert my commit which have added knowledge about dm targets to libdevmapper,haad 2009-09-09Fix bug in kmem_alloc/kmem_free of params string. Params string washaad 2009-08-16fix a comment typo.yamt 2009-06-05Parse dm param string in libdevmapper and not in a dm target init function.haad 2009-03-01Linear target has only 2 arguments in a params string not 9.haad 2008-12-19Add infrastructure needed to load device-mapper targets as modules.haad 2008-12-19Merge the haad-dm branch to -current. This branch adds LVM functionality tohaad