From 4dbd81c66959dbb78485941e3ab9705c5b05776c Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 12 Dec 2011 18:38:32 +0100
Subject: [PATCH] Destroy IKE_SA after failed XAuth authentication.

---
 src/libcharon/sa/tasks/xauth.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/libcharon/sa/tasks/xauth.c b/src/libcharon/sa/tasks/xauth.c
index de93935a9..4fd896e3c 100644
--- a/src/libcharon/sa/tasks/xauth.c
+++ b/src/libcharon/sa/tasks/xauth.c
@@ -277,9 +277,12 @@ METHOD(task_t, process_i_status, status_t,
 		DBG1(DBG_IKE, "received invalid XAUTH status response");
 		return FAILED;
 	}
-
+	if (this->status != XAUTH_OK)
+	{
+		DBG1(DBG_IKE, "destroying IKE_SA after failed XAuth authentication");
+		return FAILED;
+	}
 	establish(this);
-
 	return SUCCESS;
 }