If you are a non-root Macintosh user, you must enable targetpw to connect to SSL VPN in Enterprise mode. In Macintosh, targetpw is disabled by default for a non-root user. But, if you are a root user, you are not required to manually enable targetpw. To manually enable targetpw, specify the following lines in the /etc/sudoers directory:
Defaults targetpw # ask for the password of the target user i.e. root ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!