lsipsectool, was Re: [Openswan Users] Creating Win XP vpn connection

[Paul Wouters]

On Tue, 25 Apr 2006, Marek Greko wrote:

> > Blame microsoft. Despite the above comment about profiles per user,
> > ipsec-usable certificates need administrative priviledges to be imported
> > into the registry. This is the same issue why you cannot double click it.
>
> Uuuuu.... and how can I get normal user running lsipsectool? Admiistrator
> already has imported the correct certificate... How can I make user to use
> it?

I think the user needs "Local Administrator" rights to both import and read
the certificate as a "Host Certificate" needed for IPsec. I have never tried
it as a user without Local Admin rights, since usually people have those
permissions on their own laptop.

Maybe Enrique can tell us more,

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155