Use php function to get hostname instead of exec()
Make even ipsec script ready for GET arguments but later on it will be used as such
Correct checking for privileges.
Fix typo
For local users check the necessary priviledge is granted
Make it more clear what is the username during syslog
Allow other system authentication types to be used with ipsec. LDAP/RADIUS/local acc