Re: Using NetworkManager-vpnc

[Paul Wouters <paul cypherpunks ca>]

On Thu, 1 Sep 2005, Ryan James wrote:

> I'd like to be able to connect to my school's VPN using
> NetworkManager-vpnc, but I'm having some trouble.  Basically they only
> supply a .pcf file
> (http://daf.csulb.edu/offices/ima/its/networkservices/vpn/profiles/1-BeachNet-Unix.pcf ) which includes the encrypted group password.  The pcf as it is won't import into nm, but if you tweak it a bit (add a few config options) it will.  The problem is that when I go to connect to it, it asks for the user and group passwords, but I do not have the group password as the school will only supply it encrypted.  I've asked if I could get the unencrypted group pass but all they said was "use the pcf file supplied."  Anyone got any ideas?

If you trace it using the linux cisco vpn client, you will see the memcpy()
call showing you the decrypted (or rather de-obfuscated) password.

Openswan (Linux ipsec client) comes with a contrib program called pcf2os.pl 
that can turn the rest of your pcf file into a valid openswan style ipsec.conf
entry.

Paul
--

"With Data mining, we can search specifically for clues"

--- The AIVD (The Dutch NSA) on the necessity of ISP's data retension