[strongSwan] ike2/mobike with mschapv2 against PAM?

[Kimmo Koivisto]

Hello

I have environment with ikev2/mobike + mschapv2 and strongswan 4.5.2.
I'm using Win7 clients and EAP identities are stored to ipsec.secrets.

I found example (from wiki) and configured my connection to use GTC:

conn win7
    left=%any
    .....
    rightauth=eap-mschapv2
    rightsendcert=never
    eap_identity=%any
    eap=gtc
    auto=add

and added entry to strongswan.conf and PAM. I could not get this work.

Is there any way to use PAM, radius, ldap or anything else than
ipsec.secrets to authenticate users when using mschapv2?

Best Regards,
Kimmo