[Openswan dev] shrewsoft <-> openswan not working with PSK+XAUTH
joshihirenn at gmail.com
Thu May 8 08:00:32 EDT 2008
I am not able to establish a connection with following configuration:
Client: ShrewSoft 2.0.3
Auth Method: PSK+XAUTH
Analyzing the log I found:
Openswan do not send value of XAUTH_TYPE attribute as per:
http://www.vpnc.org/ietf-xauth/draft-beaulieu-ike-xauth-02.txt. Which says -
XAUTH-TYPE - The type of extended authentication requested whose
values are described in the next section. This is an optional
attribute for the ISAKMP_CFG_REQUEST and ISAKMP_CFG_REPLY messages.
If the XAUTH-TYPE is not present, then it is assumed to be Generic.
However, Shrewsoft vpn client expects the value of XAUTH_TYPE attribute (see
Perhaps it is following:
http://tools.ietf.org/html/draft-ietf-ipsec-isakmp-xauth-03. Which says -
XAUTH_TYPE - The type of extended authentication requested whose
values are described in the next section. This is a mandatory
attribute for the ISAKMP_CFG_REQUEST and ISAKMP_CFG_REPLY
Shrewsoft Vpn Client Log:
!! : missing required xauth type attribute
Is there any workaround/patch available?
Thanks for your time.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Dev