<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><table style="margin: 0px; padding: 0px; border: 0px; font-size: 13px; border-spacing: 0px; border-collapse: collapse; color: rgb(36, 39, 41); font-family: Arial, 'Helvetica Neue', Helvetica, sans-serif; line-height: 16.9px; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""><tbody style="margin: 0px; padding: 0px; border: 0px;" class=""><tr style="margin: 0px; padding: 0px; border: 0px;" class=""><td class="votecell" style="margin: 0px; padding: 0px 15px 0px 0px; border: 0px; vertical-align: top;"><div class="vote" style="margin: 0px; padding: 0px; border: 0px; text-align: center; min-width: 46px;"><span itemprop="upvoteCount" class=" vote-count-post" style="margin: 8px 0px; padding: 0px; border: 0px; font-size: 20px; display: block; color: rgb(106, 115, 124);"><br class="Apple-interchange-newline"><br class=""></span><a class="vote-down-off" title="This question does not show any research effort; it is unclear or not useful" style="margin: 0px auto 10px; padding: 0px; border: 0px; font-size: 1px; color: rgb(0, 119, 204); cursor: pointer; overflow: hidden; display: block; text-indent: -9999em; width: 40px; height: 30px; background-image: url(applewebdata://45E3DF91-0DA3-4A9C-A8D1-B09703BC41E5/img/sprites.svg?v=13ac32207ddf), none; background-position: 0px -220px; background-repeat: no-repeat no-repeat;">down vote</a><a class="star-off" href="http://serverfault.com/questions/802957/strongswan-with-mysql-backend-authentication-not-autneticating#" title="Click to mark as favorite question (click again to undo)" style="margin: 0px auto 2px; padding: 0px; border: 0px; font-size: 1px; color: rgb(0, 119, 204); text-decoration: none; cursor: pointer; overflow: hidden; display: block; text-indent: -9999em; width: 40px; height: 30px; background-image: url("img/sprites.svg?v=13ac32207ddf"), none; background-size: initial; background-position: 0px -120px; background-repeat: no-repeat;">favorite</a><div class="favoritecount" style="margin: 0px; padding: 0px; border: 0px;"><span style="margin: 0px; padding: 0px; border: 0px; color: rgb(106, 115, 124);" class=""></span></div></div></td><td class="postcell" style="margin: 0px; padding: 0px; border: 0px; vertical-align: top;"><div style="margin: 0px; padding: 0px; border: 0px;" class=""><div class="post-text" itemprop="text" style="margin: 0px 0px 5px; padding: 0px; border: 0px; font-size: 15px; width: 660px; word-wrap: break-word; line-height: 1.3;"><p style="margin: 0px 0px 1em; padding: 0px; border: 0px; clear: both;" class="">I have Strongswan installed and configured on my server. I've been able to successfully authentication against it when using the standard ipsec.secrets for the list of users. I want to enable the mysql plugin for backend authentication. However, I am unable to successfully authentication when I change my configuration.</p><p style="margin: 0px 0px 1em; padding: 0px; border: 0px; clear: both;" class="">I followed the instructions over at <a href="http://serverfault.com/questions/716552/can-one-use-a-mysql-backend-for-user-authentication-in-a-strongswan-vpn-server" style="margin: 0px; padding: 0px; border-width: 0px 0px 1px; border-bottom-style: dotted; border-bottom-color: rgb(69, 69, 69); color: rgb(0, 89, 153); text-decoration: none; cursor: pointer;" class="">Can one use a MySQL backend for user authentication in a strongswan VPN server?</a></p><p style="margin: 0px 0px 1em; padding: 0px; border: 0px; clear: both;" class="">My strongswan.conf is as follows:</p><pre style="margin-top: 0px; padding: 5px; border: 0px; font-size: 13px; width: auto; max-height: 600px; overflow: auto; font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif; word-wrap: normal; background-color: rgb(239, 240, 241);" class=""><code style="margin: 0px; padding: 0px; border: 0px; font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif; white-space: inherit;" class="">charon {
load_modular = yes
send_vendor_id = yes
plugins {
include strongswan.d/charon/*.conf
sql {
database = <a href="mysql://root:temp1234@localhost/strongswan_free" class="">mysql://root:temp1234@localhost/strongswan_free</a>
}
}
}
include strongswan.d/*.conf
</code></pre><p style="margin: 0px 0px 1em; padding: 0px; border: 0px; clear: both;" class="">Here is the error from the logs:</p><pre style="margin-top: 0px; padding: 5px; border: 0px; font-size: 13px; width: auto; max-height: 600px; overflow: auto; font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif; word-wrap: normal; background-color: rgb(239, 240, 241);" class=""><code style="margin: 0px; padding: 0px; border: 0px; font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif; white-space: inherit;" class="">Sep 14 08:53:17 localhost pppd[3680]: Using interface ppp0
Sep 14 08:53:17 localhost pppd[3680]: Connect: ppp0 <--> /dev/pts/1
Sep 14 08:53:17 localhost pppd[3680]: No CHAP secret found for authenticating vpnuser
Sep 14 08:53:17 localhost pppd[3680]: Peer vpnuser failed CHAP authentication
Sep 14 08:53:17 localhost xl2tpd[3580]: control_finish: Connection closed to 192.168.20.224, serial 1 ()
</code></pre><p style="margin: 0px 0px 1em; padding: 0px; border: 0px; clear: both;" class="">I do not see anything in the logs about establishing a connection to the mysql server either. In addition to that, The connection ID on mysql is not incrementing on every VPN connection attempt so it doesn't look like it is even trying to use mysql to authenticate the user.</p></div></div></td></tr></tbody></table><div class=""><br class=""></div></body></html>