diff --git a/src/etc/inc/plugins.inc.d/ipsec/auth-user.php b/src/etc/inc/plugins.inc.d/ipsec/auth-user.php index 751ee17ad..64cf0d54b 100755 --- a/src/etc/inc/plugins.inc.d/ipsec/auth-user.php +++ b/src/etc/inc/plugins.inc.d/ipsec/auth-user.php @@ -59,7 +59,6 @@ if (empty($config['ipsec']['client']['enable'])) { } $authenticated = false; -$priv_fallback = true; if (!empty($config['ipsec']['client']['local_group'])) { if (!in_array($config['ipsec']['client']['local_group'], getUserGroups($username))) { @@ -67,8 +66,6 @@ if (!empty($config['ipsec']['client']['local_group'])) { closelog(); exit(1); } - - $priv_fallback = false; } $user_source = ''; @@ -86,14 +83,6 @@ foreach (explode(',', $user_source) as $authmode) { $authenticated = authenticate_user($username, $password, $authcfg); if ($authenticated == true) { - if ($priv_fallback && stristr($authmode, "local")) { - $user = getUserEntry($username); - if (!is_array($user) || !userHasPrivilege($user, "user-ipsec-xauth-dialin")) { - $authenticated = false; - syslog(LOG_WARNING, "User '{$username}' cannot authenticate through IPsec since the required privileges are missing.\n"); - continue; - } - } break; } } diff --git a/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml b/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml index 3ba0ce622..e0cad075c 100644 --- a/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml +++ b/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml @@ -5,9 +5,6 @@ System: Shell account access - - VPN: IPsec XAUTH dialin - Proxy: Login