[strongSwan] XAuth with interactive authentication?

Alexander Sbitnev alexander.sbitnev at gmail.com
Tue Sep 23 11:03:15 CEST 2014


   I wasn't meaning any specific kind of backend. I think I am more 
interesting about existing possibility/API/practice of interactive 
password request.
Scenario behind this question is a road runner client requesting user 
XAuth credentials in a time of connection without storing password in 
some database.
xauth-eap and xauth-pam used to verify password, not to obtain it. In 
source level definitions both of them act as SERVER, not as PEER.
I see Martin already answered all my questions.


On 09/22/2014 09:24 PM, Noel Kuntze wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hello Alexander,
>
> What do you mean with that?
> Do you mean another backend than the ipsec.secrets file?
> If you do, the answer is yes. See [1].
>
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/PluginList
>
> Mit freundlichen Grüßen/Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
> Am 22.09.2014 um 17:04 schrieb Alexander Sbitnev:
>>    Is it possible to use XAuth not with secrets file, but with interactive credentials request from user? Is there any interfaces for that? Maybe something planned in VICI?
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCAAGBQJUIFtmAAoJEDg5KY9j7GZYleoP/1F/lF+drVDXQqv1q8BXKqJg
> /oEVFy4niWaDGBEFjDG+Ii0aNlcK9+01kYCWnkEWS4PWur2dGwq9jlNCNSG9hspa
> x+UcZ2hSyQp0B7BQT3tR+KjwDnFP3GetJoA3Pio2wDVNDI/JTkcUFj0owByTG0Oc
> YV+2YMio9WZd3JeTVvLw6LfqYZ74BAxlzDikNdSM+mV+AdTOnF5yMJhgBZqAaUsO
> ytcmNEogu1u9nTNi+pPBkrkXbL9ljZ/TxpTkPDfgCgZGeAPnsOORtysbfhDrKUWZ
> xOdjcnVRxLO3BlM1fks+Kdfm0DsPLJQnTDrVGn3vJ92MrLuP4DySjEPIufLvNC0+
> 1uBBJEBq/d+ycOCuvCTF02sGogdlSnA2QNsk6g3KswnR6lotsl9KN2i8mWXo0nR1
> +IF7a9rsgfB3CBQy29NNUmiqMXLn3BVcBvDdVXAjSSmtRlaWu2dH7DWprZp09hON
> /MWMy33cmRWUc+V8iCwJB8Y9m+uth2gL4rLiV8uFmzNn6bCtjaXjHcxFiTsZxV0a
> h+qoRocEJOIEOTD7cMadtbx60RmLvjnGc04uVt7rsKOJEAxSw5NLZrpjw3GQSjGM
> Y0Ai66sednZlN1YQh7F62Pir/bN0QIllXNys9jwCEe3vmWiBgQyZX+VZb/t+p92V
> 6HOyyGWYvNYhAEDIBT8b
> =GHsS
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users



More information about the Users mailing list