Cindy, > No xauth-pam :-/ > kind of suggests I'd have to recompile strongswan. I'm really hoping > I don't have to! The xauth-pam plugin is not built by default, you'll have to add --enable-xauth-pam to ./configure, and then rebuild strongSwan. Regards Martin