There is one more weird thing. If I put simply
return 1
in my script, the client can still connect.
If that doesn't prove that the script on the server side is useless, I don't know what does.
I'm quitting on OpenVPN and switching to something that works.