how to synchronize google authenticator with openvpnas

twjnorth

I switched on google authenticator but am having a problem because when logging in, it keeps saying the code is wrong and locks me out for 15 minutes at a time.

Other systems which use google authenticator have a mechanism where when registering, you enter at least two codes and it syncs up but openvpnas only asked for scanning the barcode and entering a single code and i think depending on the time elapsed before the code changed, it is now out of sync. I managed to login once in the webserver by waiting for the code to change and then entering the previous code so definitely looks like a sync issue but how can i reset it ?

Again, i've seen other systems that use google auth ask you to enter two consecutive codes if you enter the wrong code three times in a row so it can resync but this one just locks you out if you get it wrong.

Thanks in advance
Trevor

twjnorth

PS, i also noted that if I use openvpn connect (2.0.7.100) (that was downloaded from the openvpn webserver), it prompts for the google auth code at login but if I use openvpn GUI (v5), it doesnt prompt and just connects even though i have enabled google auth - does this mean openvpn GUI doesnt permit use of google auth and ignores it if switched on or do i have to import the profile again and it's just because i had previously set the profile up without google authentication switched on ?

alexkaminski

twjnorth wroteI switched on google authenticator but am having a problem because when logging in, it keeps saying the code is wrong and locks me out for 15 minutes at a time.

Other systems which use google authenticator have a mechanism where when registering, you enter at least two codes and it syncs up but openvpnas only asked for scanning the barcode and entering a single code and i think depending on the time elapsed before the code changed, it is now out of sync. I managed to login once in the webserver by waiting for the code to change and then entering the previous code so definitely looks like a sync issue but how can i reset it ?

Again, i've seen other systems that use google auth ask you to enter two consecutive codes if you enter the wrong code three times in a row so it can resync but this one just locks you out if you get it wrong.

Thanks in advance
Trevor

Hi Trevor,

I'm having the same issue you are (e.g. setup google authenticator, but it says that the code is wrong). I'm wondering if you were able to resolve it and if so what steps you had to take?

Thanks!