Comments (8)
2024-05-28 03:00:52: Info command was pushed by server ('WEB_AUTH::http://my_idm')
Viscosity only accepts HTTPS URLs, a plain HTTP URL will be rejected, which is likely what is going on here. Keep in mind the Web Auth traffic takes place outside of the VPN connection, so plain HTTP traffic could be intercepted.
from openvpn-auth-oauth2.
Thanks for the info, I added this to the notes.
from openvpn-auth-oauth2.
Thanks you! I will try to make connection secured
from openvpn-auth-oauth2.
May 18 21:11:55 gate-grvt-cloud openvpn-auth-oauth2[1188432]: time=2024-05-18T21:11:55.277Z level=WARN msg="OpenVPN Client does not support SSO authentication via webauth" ip=yyy.yyy.yyy.yyy:50331 cid=58 kid=1 common_name="Mutex OpenVPN Client" reason=CONNECT session_id=RHq1L9DD3Ky7wqJS session_state=Initial
The error is: OpenVPN Client does not support SSO authentication via webauth
. OpenVPN client must advertise that they support web authentication. If the flag IV_SSO is not present, is connection deny.
Normally Viscosity fully supports WebAuth, no clue whats going wrong here.
You could try to set verb 3
on your OpenVPN server config.
If you observe a line with peer info: IV_SSO=openurl,webauth
, then the error is inside openvpn-auth-oauth2. If the line is not present, there is an issue with that client.
from openvpn-auth-oauth2.
Hi! I had updated my Viscosity client to 1.11.1 (1683) and got an new error message:
2024-05-28 03:00:52: SENT CONTROL [Mutex OpenVPN Server]: 'PUSH_REQUEST' (status=1)
2024-05-28 03:00:52: AUTH_PENDING received, extending handshake timeout from 60s to 180s
2024-05-28 03:00:52: Info command was pushed by server ('WEB_AUTH::http://my_idm')
2024-05-28 03:00:52: Error: Invalid URL in information request received from server.
2024-05-28 03:00:52: State changed to Disconnecting (Web Auth URL Error)
I'm a bit disappointed about this error, maybe someone has fixed this issue?
from openvpn-auth-oauth2.
Sure just share your settings
from openvpn-auth-oauth2.
Hi, I tested with:
Viscosity 1.11.1 (1683) and it works fine.
Environment
- openvpn-auth-oauth2 Version: 1.21.0
- OpenVPN 2.6.3 x86_64-pc-linux-gnu
- OIDC Provider: Microsoft Entra ID
from openvpn-auth-oauth2.
This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.
from openvpn-auth-oauth2.
Related Issues (20)
- Permission denied after installing 1.19.3 HOT 12
- Login page languages HOT 1
- http listener not started after upgrade HOT 5
- With Azure AAD level=WARN msg="oauth2.refresh is enabled, but provider does not return refresh token" HOT 5
- Logs HOT 4
- Required Ports HOT 2
- FLAG CONFIG_OAUTH2_VALIDATE_COMMON__NAME HOT 2
- How to log out for a while and log in without password verification HOT 3
- Can openvpn-auth-oauth2 implement client-connect functionality similar to opevpn HOT 1
- Non interactive refresh don't work since last version HOT 7
- help with demo. HOT 2
- Management Interface HOT 6
- Ios can't log in HOT 5
- shutdown OpenVPN management connection HOT 2
- id_token not recognized HOT 3
- Multiple OpenVPN services running on VM HOT 6
- Google consent screen always asking for permission grant (View Cloud Identity Groups) everytime we connect HOT 6
- Systemd Unit Fails to Read Config HOT 11
- openvpn连接openvpn-auth-oauth2+casdoor报错 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openvpn-auth-oauth2.