Auto-login MFA bug

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
fizpop
OpenVpn Newbie
Posts: 4
Joined: Wed May 20, 2020 3:15 pm

Auto-login MFA bug

Post by fizpop » Mon Jul 26, 2021 8:24 pm

Hi all.

Im testing using auto-login profiles but with MFA still prompted. I followed the instructions here: https://openvpn.net/vpn-server-resource ... ntication/ (second last heading)

This then does prompt for MFA with an auto-login profile, but it never accepts the MFA, it just asks again. Note that it does not say its incorrect like it does if it actually is incorrect. Also, with a user-locked profile the MFA works fine, so I assume there's nothing wrong there.

Anyone else had this problem or can suggest anything to try?

Thanks!

chilinux
OpenVPN Power User
Posts: 156
Joined: Thu Mar 28, 2013 8:31 am

Re: Auto-login MFA bug

Post by chilinux » Tue Jul 27, 2021 12:03 am

What version of OpenVPN Access Server and what version of OpenVPN Connect client is being used?

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: Auto-login MFA bug

Post by openvpn_inc » Tue Jul 27, 2021 9:08 am

Hello fizpop,

> The VPN client is a modern VPN client such as OpenVPN Connect v3.3 or better.

Are you using that or not? This is a very new feature and only works with the most up-to-date software.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

fizpop
OpenVpn Newbie
Posts: 4
Joined: Wed May 20, 2020 3:15 pm

Re: Auto-login MFA bug

Post by fizpop » Tue Jul 27, 2021 4:10 pm

Ah, thanks guys. It was a long day and missed that line specifying the version. I'm on 3.2.7, will update and try again :)

Edit: I'm on a Mac and the latest macOS version seems to be 3.2.7. Will have to wait then!

chilinux
OpenVPN Power User
Posts: 156
Joined: Thu Mar 28, 2013 8:31 am

Re: Auto-login MFA bug

Post by chilinux » Wed Jul 28, 2021 12:10 am

The release notes for OpenVPN Access Server indicates under AS v2.9.2:
Added ability to require MFA for auto-login profiles - requires Connect v3.3 or recent OpenVPN 2 client
The latest stable version of Tunnelblick (currently 3.8.5a) defaults to using OpenVPN (Community Edition) 2.5.3. It doesn't get anymore recent OpenVPN 2 client than that. As an added benefit, they support both Intel and M1 (ARM) Macs.

You can find Tunnelblick here:
https://tunnelblick.net/

So, that may provide the functionality you are looking for while waiting for Connect v3.3 for Mac.

Just make sure AS is on v2.9.2 first and you may also need to re-download the latest profile after upgrading.

fizpop
OpenVpn Newbie
Posts: 4
Joined: Wed May 20, 2020 3:15 pm

Re: Auto-login MFA bug

Post by fizpop » Tue Aug 17, 2021 6:18 pm

v3.3.x of the client for Mac was released and it is now working as it should. Thanks again!

Post Reply