On 01/16/2013 09:23 AM, Martin Willi wrote: > Hi Claude, > >> Is the rightgroups parameter in ipsec.conf appicable to Certificate DN's ? > No, none of the DN components is interpreted as group. > > To limit a connection to an O=, OU= or other RDN you can use wildcards > in rightid, such as "C=CH, O=strongSwan, OU=sales, CN=*". > > Regards > Martin > Hi Martin,
Thanks for the explanations, it works. :) kind regards, Claude -- Claude Tompers Ingénieur réseau et système Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
