ikev1: Allow late connection switching based on XAuth username

diff --git a/src/libcharon/sa/ikev1/tasks/xauth.c b/src/libcharon/sa/ikev1/tasks/xauth.c
index 9329dab5eb7f78a9c6edcd46de20b771a78cebf2..bdc5d67f75cab325fb8ee22c688be388ea47f71d 100644 (file)
--- a/src/libcharon/sa/ikev1/tasks/xauth.c
+++ b/src/libcharon/sa/ikev1/tasks/xauth.c
@@ -463,12 +463,6 @@ METHOD(task_t, process_i, status_t,
                        return NEED_MORE;
                case SUCCESS:
                        id = this->xauth->get_identity(this->xauth);
-                       if (this->user && !id->matches(id, this->user))
-                       {
-                               DBG1(DBG_IKE, "XAuth username '%Y' does not match to "
-                                        "configured username '%Y'", id, this->user);
-                               break;
-                       }
                        DBG1(DBG_IKE, "XAuth authentication of '%Y' successful", id);
                        if (add_auth_cfg(this, id, FALSE) && allowed(this))
                        {