[Swan] [Openswan Users] XAUTH not receiving/computing password

[Nels Lindquist]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 8/26/2014 3:08 PM, Nels Lindquist wrote:

> I'm experiencing the same issue on CentOS6, actually.
> 
> I commented out everything in /etc/pam.d/pluto except for:
> 
> account    required    pam_permit.so password   required
> pam_permit.so session    required    pam_permit.so
> 
> ...but it didn't make any difference.  Still getting an
> authentication failure:
> 
> Aug 26 14:53:42 mail pluto[16526]: XAUTH: User nels: Attempting to
> login Aug 26 14:53:42 mail pluto[16526]: XAUTH: pam authentication
> being called to authenticate user nels Aug 26 14:53:44 mail
> pluto[16526]: XAUTH: pam_authenticate failed with 'Authentication
> failure' Aug 26 14:53:44 mail pluto[16526]: XAUTH: User nels:
> Authentication Failed: Incorrect Username or Password

Just realized I forgot about auth.

Setting...

auth    required    pam_permit.so

... in addition to the above did allow the connection.

Further testing indicates that only "auth" and "account" seem to be
causing issues, and I explicitly need to comment out "[auth|account]
include  system-auth in addition to adding the pam_permit.so lines.
The latter alone is insufficient.


- -- 
Nels Lindquist
<nlindq at maei.ca>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.20 (MingW32)

iEYEARECAAYFAlP8+/0ACgkQh6z5POoOLgS2MwCgq9f1xpzloqO0xweCAh2sUttp
6dQAnRc/UDLGKz3ZQHQ5SeZ6GpI3yuQO
=Mago
-----END PGP SIGNATURE-----