  <varlistentry>
  <term><emphasis remap='B'>leftxauthclient</emphasis></term>
  <listitem>
<para>Left is an XAUTH client. The xauth connection will have to be started
interactively and cannot be configured using <emphasis remap='B'>auto=start</emphasis>.
Instead, it has to be started from the commandline using
<emphasis remap='I'>ipsec auto --up connname</emphasis>. You will then be prompted
for the username and password. To setup an XAUTH connection non-interactively, which
defeats the whole purpose of XAUTH, but is regularly requested by users, it is
possible to use a whack command - <emphasis remap='I'>ipsec whack  --name baduser --ipsecgroup-xauth --xauthname badusername --xauthpass password --initiate</emphasis>
The other side of the connection should be configured as <emphasis remap='B'>rightxauthserver</emphasis>.
Acceptable values are <emphasis remap='B'>yes</emphasis> or <emphasis remap='B'>no</emphasis>
(the default).</para>
  </listitem>
  </varlistentry>

