From 27f26f0dabe04ecefff37daa6a3b99645a7b50ba Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Sun, 30 Jul 2017 14:04:54 +0200
Subject: [PATCH] ipsec: mock authcfg for backwards compat, "none" is not an
 auth server #1748

---
 src/etc/inc/plugins.inc.d/ipsec.inc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc
index eb5d6e502..1d98d5564 100644
--- a/src/etc/inc/plugins.inc.d/ipsec.inc
+++ b/src/etc/inc/plugins.inc.d/ipsec.inc
@@ -908,9 +908,10 @@ EOD;
                     }
                 }
             }
-            if ($a_client['user_source'] != "none" && $disable_xauth == false) {
+            if (isset($a_client['enable']) && !$disable_xauth) {
                 $strongswan .= "\t\txauth-generic {\n";
                 $strongswan .= "\t\t\tscript = /usr/local/etc/inc/plugins.inc.d/ipsec/auth-user.php\n";
+                $strongswan .= "\t\t\tauthcfg = unused\n";
                 $strongswan .= "\t\t}\n";
             }
         }