v3 client OTP not working
Posted: Thu Jan 27, 2022 1:24 pm
We are having OpenVPN server 5.3. hosted on Linux machines. Which is connected to our LDAP to fetch users, as well as uses OTP as the second level of authentication.
Clients are using Linux, macOS, Windows.
On Linux, macOS and phones are working without problems. The client gives his username/password + OTP and he is connected.
On the OpenVPN Connect v3 client for Windows, it is not working. Version v2 is working but it is quite outdated,
The problem is line 'static-challenge in our configuration.
The client asks the user about OTP, but then it loops and asks him again and again.
Not initiating the connection at all. Check by logs on a client as well as a server that nothing is happening.
When we remove 'static-challenge from client configuration. It will then try to connect but without the OTP, the connection is rejected.
Does anyone know any workaround for this?
Notes.
This is supported with two modules:
https://github.com/guywyers/openvpn-auth-ldap
https://github.com/evgeny-gridasov/openvpn-otp
Server version: 2.5.4
Clients version Linux: 2.3 up to 2.5.3
macOS: Thunderclick
Windows: OpenVPN Connect v3
Clients are using Linux, macOS, Windows.
On Linux, macOS and phones are working without problems. The client gives his username/password + OTP and he is connected.
On the OpenVPN Connect v3 client for Windows, it is not working. Version v2 is working but it is quite outdated,
The problem is line 'static-challenge in our configuration.
The client asks the user about OTP, but then it loops and asks him again and again.
Not initiating the connection at all. Check by logs on a client as well as a server that nothing is happening.
When we remove 'static-challenge from client configuration. It will then try to connect but without the OTP, the connection is rejected.
Does anyone know any workaround for this?
Notes.
This is supported with two modules:
https://github.com/guywyers/openvpn-auth-ldap
https://github.com/evgeny-gridasov/openvpn-otp
Server version: 2.5.4
Clients version Linux: 2.3 up to 2.5.3
macOS: Thunderclick
Windows: OpenVPN Connect v3