<p dir="ltr">What additional information would be needed to open a bug ticket? I can provide outputs if needed.</p>
<p dir="ltr">Thanks,<br>
Tom</p>
<div class="gmail_quote">On 10 Jul 2016 02:11, "Chris Buechler" <<a href="mailto:cbuechler@gmail.com">cbuechler@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Fri, Jul 8, 2016 at 2:33 AM, Tom Griffin <<a href="mailto:t.griffin@sheffield.ac.uk">t.griffin@sheffield.ac.uk</a>> wrote:<br>
> Hello,<br>
><br>
> I am successfully sending UNITY_* attrs to IKEv1 clients which support it,<br>
> but the UNITY_SAVE_PASSWD option does not seem to be accepted correctly, it<br>
> simply doesn't allow the client to save their password.<br>
><br>
> /etc/strongswan.conf snippet;<br>
>><br>
>> charon {<br>
>> plugins {<br>
>> include strongswan.d/charon/*.conf<br>
>> attr {<br>
>> # Banner<br>
>> #28672 = "TEST BANNER"<br>
>> # Allow password saving<br>
>> 28673 = yes<br>
>> # Search domain<br>
>> 28674 = "<a href="http://sheffield.ac.uk" rel="noreferrer" target="_blank">sheffield.ac.uk</a>"<br>
>> }<br>
>> }<br>
>> }<br>
><br>
><br>
> The banner message and search domains *do* work, but password saving<br>
> doesn't. I've tried setting the option to both "1" and "yes" and neither<br>
> seem to work, should it be set to a particular value for it to take effect?<br>
><br>
<br>
I was never able to get the password saving to work with strongswan<br>
either, though the other Unity attrs were working. Pretty sure there's<br>
a bug there, but haven't yet had a chance to dig further into it to<br>
confirm and get a bug ticket opened. Cisco's IPsec client on Windows,<br>
and OS X and iOS's built in clients all exhibited the same behavior.<br>
Connecting same clients to racoon with that option configured all<br>
worked correctly.<br>
</blockquote></div>