diff --git a/.gitignore b/.gitignore
index caf2c88..f05efb0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 /strongswan-5.1.0.tar.bz2
 /strongswan-5.1.1.tar.bz2
 /strongswan-5.1.1.tar.bz2.sig
+/strongswan-5.1.2.tar.bz2
diff --git a/sources b/sources
index b3b0e07..135aa72 100644
--- a/sources
+++ b/sources
@@ -1,2 +1 @@
-e3af3d493d22286be3cd794533a8966a  strongswan-5.1.1.tar.bz2
-5381c48d5cabec932aa2904abde93cd3  strongswan-5.1.1.tar.bz2.sig
+d45a2e89c624bceaf2e53c9b9cdddf83  strongswan-5.1.2.tar.bz2
diff --git a/strongswan.spec b/strongswan.spec
index 4880b49..1f23484 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -31,6 +31,7 @@ BuildRequires:  sqlite-devel
 BuildRequires:  gettext-devel
 BuildRequires:  trousers-devel
 BuildRequires:  libxml2-devel
+BuildRequires:  pam-devel
 %if 0%{?enable_nm}
 BuildRequires:  NetworkManager-devel
 BuildRequires:  NetworkManager-glib-devel
@@ -104,6 +105,7 @@ autoreconf
     --enable-openssl \
     --enable-md4 \
     --enable-xauth-eap \
+    --enable-xauth-pam \
     --enable-eap-md5 \
     --enable-eap-gtc \
     --enable-eap-tls \
@@ -255,6 +257,7 @@ fi
 %{_libdir}/%{name}/plugins/lib%{name}-x509.so
 %{_libdir}/%{name}/plugins/lib%{name}-xauth-generic.so
 %{_libdir}/%{name}/plugins/lib%{name}-xauth-eap.so
+%{_libdir}/%{name}/plugins/lib%{name}-xauth-pam.so
 %{_libdir}/%{name}/plugins/lib%{name}-xcbc.so
 %{_libdir}/%{name}/plugins/lib%{name}-md4.so
 %{_libdir}/%{name}/plugins/lib%{name}-eap-md5.so
@@ -346,6 +349,7 @@ fi
 %changelog
 * Mon Mar 03 2014 Pavel Šimerda <psimerda@redhat.com> - 5.1.2-1
 - bump to 5.1.2
+- #1071338 - strongswan is compiled without xauth-pam plugin
 
 * Thu Feb 20 2014 Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-6
 - Fixed full hardening for strongswan (full relro and PIE).