Hello,
I am testing Radius authentication to Windows Server 2012R2 with group mappings and static IP’s defined in Dial-in properties in AD. I setup radius connection and group mappings. I use this page as example:
https://openvpn.net/vpn-server-resources/integrating-active-directory-with-access-server-using-radius-and-post_auth/
I am using Openvpn AS v2.7.5
Static IP doesn’t work. User can’t connect, there is Authentication failed in client app.
/var/log/openvpnas-node.log:
[stdout#info] ***** RADIUS-Reply: Framed-IP-Address received, trying to set client IP address to: post_auth script failed: can only join an iterable: python/threadpool:250,python/threadpool:266,python/context:122,python/context:85,auth/authdelegate:161,<string>:73 (exceptions.TypeError)
I’ve checked radius packets with wireshark on Win AD, there are all required parametrs:
AVP: t=Framed-Pool(88) l=8 val=admins
AVP: t=Framed-Protocol(7) l=6 val=PPP(1)
AVP: t=Service-Type(6) l=6 val=Framed(2)
AVP: t=Framed-IP-Address(8) l=6 val=10.10.2.55
If I disable static IP address from Dial-in propertis from user, connection is esablished on IP from AS group (dynamic range), so the group mapping works as expected.
Any help would be greatly appreciated.
Rafal.
