I have a IKEv1 configuration that is using XAuth-PAM to authenticate users.

I have noticed that after my ipsec process is running for a large amount of 
time, that a number of new connections are stuck in in XAuth stage.

When looking at the logs for our pam module, we see it is only called every few 
seconds.  The pam module itself, executes its steps in a reasonable amount of 

Now if we restart ipsec, the pam module is called instantly for every new 

Because of this delay in the xauth-pam module being called, it appears clients 
will cancel the IKE negotiation.

I am unsure what could be causing this issue, and any help would be appreciated.

I am running on Ubuntu 12.04, Strongswan 5.5.1.

Thank you for any assistance,

Joshua G

Users mailing list

Reply via email to