From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 25 Oct 2012 07:51:47 +0000 (+0200)
Subject: Added documentation for NTLM secrets
X-Git-Tag: 5.0.2dr4~261
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2380f3a830a87feb8b5ca25d9a68e30e9442f420;p=thirdparty%2Fstrongswan.git

Added documentation for NTLM secrets
---

diff --git a/man/ipsec.secrets.5.in b/man/ipsec.secrets.5.in
index 2e58db1e1c..5a61688c69 100644
--- a/man/ipsec.secrets.5.in
+++ b/man/ipsec.secrets.5.in
@@ -100,6 +100,9 @@ defines an ECDSA private key
 .B EAP
 defines EAP credentials
 .TP
+.B NTLM
+defines NTLM credentials
+.TP
 .B XAUTH
 defines XAUTH credentials
 .TP
@@ -151,6 +154,13 @@ The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets.
 .br
 \fBEAP\fP secrets are IKEv2 only.
 .TP
+.B <user id> : NTLM <secret>
+The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets, but the
+secret is stored as NTLM hash, which is MD4(UTF-16LE(secret)), instead of as
+cleartext.
+.br
+\fBNTLM\fP secrets can only be used with the \fBeap-mschapv2\fP plugin.
+.TP
 .B [ <servername> ] <username> : XAUTH <password>
 The format of \fIpassword\fP is the same as that of \fBPSK\fP secrets.
 \fBXAUTH\fP secrets are IKEv1 only.