[Openswan Users] Require help related to XAUTH feature

[Jacco de Leeuw]

utkarsh shah wrote:

> I want to create a vpn connection in which *user authentication can 
> be performed using LDAP or Radius server*. I would like to know how can 
> I achieve it ??
>  
>     Once while reading openswan site I found that using XAUTH feature 
> one can do it. from that even I came to know how we can make openswan a 
> *XAUTH Client* but don't know *how to configure it as server

http://wiki.openswan.org/index.php/XAUTH%20authenticator

> and how can I specify LDAP or Radius server address* and users allowed 
> to access.

It appears that XAUTH + PAM can be used for what you want but the page
linked above recommends against it.

Alternatives would be to switch to PPTP or L2TP/IPsec. These just tunnel
PPP packets so you can use any legacy authentication protocol you want.

> If any one knows this please help me its high priority task and 
> required urgently.

Commercial support is available from Xelerance and Strongsec, if it is
really high priority.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl
                     Mosquitos suck