Preventing network manager from saving vpn user password

spidernik84 · 06-22-2011, 02:28 AM

Hi,
we're using Network Manager with vpnc plugin (cisco vpn).
According to our IT policy, we'd like to prevent the users from saving the password.
I've been trying to set the value via gconf as mandatory, but the setting is blatantly ignored:
system/networking/connections/1/vpn/ipsec-secret-type

I set it on "ask" and mandatory.
I'm quite sure that's the wrong key. Anyone has got any idea?

Thanks

sundialsvcs · 06-22-2011, 08:18 AM

I strongly advise that your company's policy should specify that the VPN access is controlled using digital certificates, issued by your IT department with a life-span of no more than 4 months, all of them password-protected (i.e. "encrypted").

Although VPN is a robust and reliable encryption system, if it relies upon "simple passwords," it is no more secure than is ssh when similarly configured. My point is, passwords are not secure!

spidernik84 · 06-22-2011, 09:02 AM

Quote:

Originally Posted by sundialsvcs

I strongly advise that your company's policy should specify that the VPN access is controlled using digital certificates, issued by your IT department with a life-span of no more than 4 months, all of them password-protected (i.e. "encrypted").

Although VPN is a robust and reliable encryption system, if it relies upon "simple passwords," it is no more secure than is ssh when similarly configured. My point is, passwords are not secure!

Thanks, a wise suggestion!

That's our final goal, but for some weeks we need to enforce the password policy while we implement the new solution. Any workaround?