<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>HI,</p>
<p><br>
</p>
<p>I have a IKEv1 configuration that is using XAuth-PAM to authenticate users.</p>
<p>I have noticed that after my ipsec process is running for a large amount of time, that a number of new connections are stuck in in XAuth stage.</p>
<p><br>
</p>
<p>When looking at the logs for our pam module, we see it is only called every few seconds. The pam module itself, executes its steps in a reasonable amount of time.</p>
<p><br>
</p>
<p>Now if we restart ipsec, the pam module is called instantly for every new connection.</p>
<p><br>
</p>
<p>Because of this delay in the xauth-pam module being called, it appears clients will cancel the IKE negotiation.</p>
<p><br>
</p>
<p>I am unsure what could be causing this issue, and any help would be appreciated.</p>
<p><br>
</p>
<p>I am running on Ubuntu 12.04, Strongswan 5.5.1.<span style="color: rgb(98, 249, 0); font-family: 'Andale Mono'; font-size: 12px; background-color: rgb(0, 0, 0);"></span></p>
<p><br>
</p>
<p>Thank you for any assistance,</p>
<p>Joshua G</p>
<p><br>
</p>
</div>
</body>
</html>