From 2380f3a830a87feb8b5ca25d9a68e30e9442f420 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 25 Oct 2012 09:51:47 +0200
Subject: Added documentation for NTLM secrets

---
 man/ipsec.secrets.5.in | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'man/ipsec.secrets.5.in')

diff --git a/man/ipsec.secrets.5.in b/man/ipsec.secrets.5.in
index 2e58db1e1..5a61688c6 100644
--- a/man/ipsec.secrets.5.in
+++ b/man/ipsec.secrets.5.in
@@ -100,6 +100,9 @@ defines an ECDSA private key
 .B EAP
 defines EAP credentials
 .TP
+.B NTLM
+defines NTLM credentials
+.TP
 .B XAUTH
 defines XAUTH credentials
 .TP
@@ -151,6 +154,13 @@ The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets.
 .br
 \fBEAP\fP secrets are IKEv2 only.
 .TP
+.B <user id> : NTLM <secret>
+The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets, but the
+secret is stored as NTLM hash, which is MD4(UTF-16LE(secret)), instead of as
+cleartext.
+.br
+\fBNTLM\fP secrets can only be used with the \fBeap-mschapv2\fP plugin.
+.TP
 .B [ <servername> ] <username> : XAUTH <password>
 The format of \fIpassword\fP is the same as that of \fBPSK\fP secrets.
 \fBXAUTH\fP secrets are IKEv1 only.
-- 
cgit v1.2.3