[src/netbsd-3]: src/crypto/dist/ipsec-tools/src/racoon Pull up revision 1.15 ...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/3e9ebce48948
branches:  netbsd-3
changeset: 575800:3e9ebce48948
user:      tron <tron%NetBSD.org@localhost>
date:      Wed May 11 17:44:42 2005 +0000

description:
Pull up revision 1.15 via patch (requested by manu in ticket #285):
Add two Cisco extensions for pushing PFS group and save password
setting throug ISAKMP mode config

diffstat:

 crypto/dist/ipsec-tools/src/racoon/racoon.conf.5 |  16 ++++++++++++----
 1 files changed, 12 insertions(+), 4 deletions(-)

diffs (31 lines):

diff -r 035d9d48640c -r 3e9ebce48948 crypto/dist/ipsec-tools/src/racoon/racoon.conf.5
--- a/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5  Wed May 11 17:42:31 2005 +0000
+++ b/crypto/dist/ipsec-tools/src/racoon/racoon.conf.5  Wed May 11 17:44:42 2005 +0000
@@ -1,6 +1,6 @@
-.\"    $NetBSD: racoon.conf.5,v 1.1.1.4.2.1 2005/05/11 12:17:26 tron Exp $
+.\"    $NetBSD: racoon.conf.5,v 1.1.1.4.2.2 2005/05/11 17:44:42 tron Exp $
 .\"
-.\" Id: racoon.conf.5,v 1.27.2.2 2005/03/16 23:18:43 manubsd Exp
+.\" $Id: racoon.conf.5,v 1.1.1.4.2.2 2005/05/11 17:44:42 tron Exp $
 .\"
 .\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 .\" All rights reserved.
@@ -994,8 +994,16 @@
 .It Ic auth_throttle Ar delay ;
 On each failed Xauth authentication attempt, refuse new attempts for 
 .Ar delay
-more seconds. This is to avoid dictionary attacks on Xauth passwords.
-Default is one second. Set to zero to disable authentication delay.
+more seconds.
+This is to avoid dictionary attacks on Xauth passwords.
+Default is one second.
+Set to zero to disable authentication delay.
+.It Ic pfs_group Ar group ;
+Sets the PFS group used in the client proposal (Cisco VPN client only).
+Default is 0.
+.It Ic save_passwd (on | off) ;
+Allow the client to save the Xauth password (Cisco VPN client only). 
+Default is off.
 .El
 .El
 .Ss Special directives