[Openswan Users] XAuth and PAM_radius causing pluto to hang

[DAVID ALLONBY]

Hello list!
I've got a pretty frustrating problem, which I've replicated on two Centos5.5 devices running OpenSwan 2.6.33 and pam_radius 1.3.17.
I wish to permit access to the server via iPhone and Blackberry devices, and it'd seem (since the Blackberry doesn't support L2TP) that the only obvious way would be to implement XAuth+ModeCfg.  I have done so, have the client devices managing to 'login', but the pluto process will hang (requiring SIGKILL to clear it) immediately after a successful pam_radius authentication.  An authentication failure does not produce this hang.
I have noted the recommendation against implementing pam_radius, but I assume that a 0% auth success rate is abnormal.  Has anyone had this working, and if so would you care to share any tips?

David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20110428/c9fb38d4/attachment.html