From 7e9e1f96dff783123ed91073779c55223b109278 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 3 Jan 2012 11:28:45 +0100 Subject: [PATCH] Don't trigger reauthentication if initiator authenticated using XAuth --- src/libcharon/sa/ike_sa.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libcharon/sa/ike_sa.c b/src/libcharon/sa/ike_sa.c index e5b2f8f66..c7a8a97f3 100644 --- a/src/libcharon/sa/ike_sa.c +++ b/src/libcharon/sa/ike_sa.c @@ -1326,6 +1326,7 @@ METHOD(ike_sa_t, reauth, status_t, { DBG1(DBG_IKE, "initiator did not reauthenticate as requested"); if (this->other_virtual_ip != NULL || + has_condition(this, COND_XAUTH_AUTHENTICATED) || has_condition(this, COND_EAP_AUTHENTICATED) #ifdef ME /* as mediation server we too cannot reauth the IKE_SA */