auth-cfg: Don't enforce EAP_DYNAMIC

We now store the actual method on the auth config, which won't match
anymore if rightauth=eap-dynamic is configured.

diff --git a/src/libstrongswan/credentials/auth_cfg.c b/src/libstrongswan/credentials/auth_cfg.c
index 9b5763150ed1aed4108e205d8e704530140ed6f6..1de22139717e7c34b74717a4f3c244eaf0ccbf4f 100644 (file)
--- a/src/libstrongswan/credentials/auth_cfg.c
+++ b/src/libstrongswan/credentials/auth_cfg.c
@@ -661,7 +661,8 @@ METHOD(auth_cfg_t, complies, bool,
                        }
                        case AUTH_RULE_EAP_TYPE:
                        {
-                               if ((uintptr_t)value != (uintptr_t)get(this, t1))
+                               if ((uintptr_t)value != (uintptr_t)get(this, t1) &&
+                                       (uintptr_t)value != EAP_DYNAMIC)
                                {
                                        success = FALSE;
                                        if (log_error)