Added documentation for NTLM secrets

diff --git a/man/ipsec.secrets.5.in b/man/ipsec.secrets.5.in
index 2e58db1..5a61688 100644 (file)
--- a/man/ipsec.secrets.5.in
+++ b/man/ipsec.secrets.5.in
@@ -100,6 +100,9 @@ defines an ECDSA private key
 .B EAP
 defines EAP credentials
 .TP
 .B EAP
 defines EAP credentials
 .TP

+.B NTLM
+defines NTLM credentials
+.TP

 .B XAUTH
 defines XAUTH credentials
 .TP
 .B XAUTH
 defines XAUTH credentials
 .TP


@@ -151,6 +154,13 @@ The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets.
 .br
 \fBEAP\fP secrets are IKEv2 only.
 .TP
 .br
 \fBEAP\fP secrets are IKEv2 only.
 .TP

+.B <user id> : NTLM <secret>
+The format of \fIsecret\fP is the same as that of \fBPSK\fP secrets, but the
+secret is stored as NTLM hash, which is MD4(UTF-16LE(secret)), instead of as
+cleartext.
+.br
+\fBNTLM\fP secrets can only be used with the \fBeap-mschapv2\fP plugin.
+.TP

 .B [ <servername> ] <username> : XAUTH <password>
 The format of \fIpassword\fP is the same as that of \fBPSK\fP secrets.
 \fBXAUTH\fP secrets are IKEv1 only.
 .B [ <servername> ] <username> : XAUTH <password>
 The format of \fIpassword\fP is the same as that of \fBPSK\fP secrets.
 \fBXAUTH\fP secrets are IKEv1 only.