[Openswan Users] XAuth and PAM_radius causing pluto to hang

[Paul Wouters]

On Thu, 28 Apr 2011, DAVID ALLONBY wrote:

> Date: Thu, 28 Apr 2011 15:10:41 +0100 (BST)
> 
> Hello list!
> I've got a pretty frustrating problem, which I've replicated on two Centos5.5 devices running OpenSwan 2.6.33 and
> pam_radius 1.3.17.
> 
> I wish to permit access to the server via iPhone and Blackberry devices, and it'd seem (since the Blackberry doesn't
> support L2TP) that the only obvious way would be to implement XAuth+ModeCfg.  I have done so, have the client devices
> managing to 'login', but the pluto process will hang (requiring SIGKILL to clear it) immediately after a successful
> pam_radius authentication.  An authentication failure does not produce this hang.
> 
> I have noted the recommendation against implementing pam_radius, but I assume that a 0% auth success rate is abnormal.
>  Has anyone had this working, and if so would you care to share any tips?

Could you post a plutodebug=all with some config details into bugs.openswan.org ?

Paul