Hi Chris, > With this config, w/ and w/o UNITY_SAVE_PASSWD, I get prompted for XAuth > credentials on each VPN connect. The VPN connection is added through a > .mobileconfig file, using VPN on demand on the iOS side.
Ah, I didn't know this feature and I never actually used Apple's configuration utility. My tests were with a configuration created directly on the phone (which has no option to configure VPN on demand). Anyway, it seems the client behaves differently if the config is created on the phone than if it is created with the configuration utility. I found a (german) tutorial describing how to configure a VPN connection using said tool, which also offers a solution to store the XAuth password [1]. It roughly translates to this: "Instead of transferring the config with the configuration utility directly to the phone, export it as file and import that file via email on the phone. (That's probably something you already did as the export results in a .mobileconfig file). Before sending the config to the phone, edit the XML file, search for the XAuthName entry and add the following two lines after it: <key>XAuthPassword</key> <string>yourpassword</string> As opening the patched .mobileconfig file in the configuration utility would remove the added lines, the file has to be transferred to the phone via email." I did not try this, so I'm not sure if it works. Of course, this also doesn't answer the question why UNITY_SAVE_PASSWD does not work, or if it is even supported by iOS. Regards, Tobias [1] http://www.apfeltalk.de/forum/tutorial-vpn-demand-t335026.html _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users