I use Linux IPSec VPN-server based on strongSwan 5.2.1 with eap-mschapv2 authentication using passwords in ipsec.secrets file.
Now I need to add one more VPN-server for the same users and I want to have a single user/password database on the remote host.
Is it possible to implement external authentication in strongSwan using some kind of script?
I know that it is possible to implement some kind of RADIUS server for this case, but I think there should be a better way to do this.
I also tries to use ext-auth plugin for this case, but this plugin can access only user IDs, not user passwords.
I'll be grateful for any advice.