[Openswan Users] Creating Win XP vpn connection

[Paul Wouters]

On Mon, 24 Apr 2006, Marek Greko wrote:

> Dÿÿa ÿÿt 20. Apríl 2006 15:58 John Riley napísal:
> > Just out of curiousity, which OpenSwan version are you using?  I had
> > some problems with the ipsec.exe client and rekeying with the version I
> > was using originally (2.3.1), and this was not showing up when the
> > clients were connected by LAN to the server for testing.  I upgraded
> > OpenSwan and changed to lsipsectool and the tunnels are more stable.
>
> I tried lsipsectool today. I was very surprised. I set up the tunnel as admin.
> It was amazing. I can have a tunnel set up in a minute. No mmc hacking... But
> when I logged in as normal user I run lsipsectool I had to set up tunnel once
> more. The profiles are separate for separate users. The user is also able to
> mess up already set up tunnel.

Yes, profiles per users should be different.

> ... and I was not able to set up tunnel as normal user. When I clicked icon to
> pick a certificate, lsipsectool suddenly crashed. Which version are you
> using?

Blame microsoft. Despite the above comment about profiles per user, ipsec-usable
certificates need administrative priviledges to be imported into the registry.
This is the same issue why you cannot double click it.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155