HI,

I have a IKEv1 configuration that is using XAuth-PAM to authenticate users.

I have noticed that after my ipsec process is running for a large amount of 
time, that a number of new connections are stuck in in XAuth stage.


When looking at the logs for our pam module, we see it is only called every few 
seconds.  The pam module itself, executes its steps in a reasonable amount of 
time.


Now if we restart ipsec, the pam module is called instantly for every new 
connection.


Because of this delay in the xauth-pam module being called, it appears clients 
will cancel the IKE negotiation.


I am unsure what could be causing this issue, and any help would be appreciated.


I am running on Ubuntu 12.04, Strongswan 5.5.1.


Thank you for any assistance,

Joshua G

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to