Comment 19 for bug 91964

This is fixed, unless you have something else in mind. Here's how it works. When you connect to the VPN entry for the first time, you are presented with three options:

1. save passwords for this session (leave unchecked if you use one time passwords).
2. save passwords in keyring (leave unchecked if you use one time passwords).
3. save group password in keyring (check this one)

From that point on, any time you connect in the future, your group password will be saved... and you will be prompted to enter a password. If you're not being prompted to use a password, then you may have one saved in the keyring.

Go to Applications, Accessories, Passwords and Encryption Keys, and click on the far right tab of "passwords". You should see only one entry with the name of your VPN connection and at the tail end it should say "group_password". If you have any VPN related entry other than that for the group password, remove it, and educate your users not to save the password to the keyring when connecting.