diff --git a/src/etc/inc/plugins.inc.d/ipsec/auth-user.php b/src/etc/inc/plugins.inc.d/ipsec/auth-user.php
index 751ee17ad..64cf0d54b 100755
--- a/src/etc/inc/plugins.inc.d/ipsec/auth-user.php
+++ b/src/etc/inc/plugins.inc.d/ipsec/auth-user.php
@@ -59,7 +59,6 @@ if (empty($config['ipsec']['client']['enable'])) {
}
$authenticated = false;
-$priv_fallback = true;
if (!empty($config['ipsec']['client']['local_group'])) {
if (!in_array($config['ipsec']['client']['local_group'], getUserGroups($username))) {
@@ -67,8 +66,6 @@ if (!empty($config['ipsec']['client']['local_group'])) {
closelog();
exit(1);
}
-
- $priv_fallback = false;
}
$user_source = '';
@@ -86,14 +83,6 @@ foreach (explode(',', $user_source) as $authmode) {
$authenticated = authenticate_user($username, $password, $authcfg);
if ($authenticated == true) {
- if ($priv_fallback && stristr($authmode, "local")) {
- $user = getUserEntry($username);
- if (!is_array($user) || !userHasPrivilege($user, "user-ipsec-xauth-dialin")) {
- $authenticated = false;
- syslog(LOG_WARNING, "User '{$username}' cannot authenticate through IPsec since the required privileges are missing.\n");
- continue;
- }
- }
break;
}
}
diff --git a/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml b/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
index 3ba0ce622..e0cad075c 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+++ b/src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
@@ -5,9 +5,6 @@
System: Shell account access
-
- VPN: IPsec XAUTH dialin
-
Proxy: Login