Messages

thx this was helpfull.

the ui designer asks me why this is not setting in the config export?

lol franco i think we are becoming friends. please checkout

https://openvpn.net/cloud-docs/two-factor-authentication-on-profile-download-2/

in the openvpn cloud this is already working. securepoint utm and the client seem to be capable of it.

if a ui designer is seeing the solution of prefixing the totp token to the password, he probably wants to die.

so this is no trolling but a valid question.

Because you changed the setting and didn't tell us? ¯\_(ツ)_/¯


Cheers,
Franco

haha true, i didnt know RFC 6238 in detail a this time, but stating 3 times the same wasnt really helpfull.

the problem was that in the rfc states a time window of 30sec, if you set another time window you cannot use authenticator apps like the google authenticator because there 30sec is fixed. If you use FreeOTP you can change the time window to another value. For me FreeTOP is not working with the QR Code from Opnsense, but adding the code manually with another time window should work. since this setting is causing problems, i would suggest to a bigger hint, which gives attention to the fact that other values than 30 are not RFC conform and not working with the most authenticator apps.

Hi,

anybody knows howto get the extra challenge working in the OpenVPN Client? I tried with Openvpn Connect V3 and Securepoint 2.0.38. As far is i know both Clients should be capable of asking for the otp token in a extra field.

I added:

static-challenge "TOTP Token" 1

in the server but this wasnt working. Any ideas?

Hi,

when is OpenVPN 3 Support planed in Opnsense?

Regards,
yo

please read yourself franco im saying the test is failing in my first post.

which client franco? im using the internal tester..

if time window is not the default value (30sec), totp is broken for me.

wth the only thing im using is the tester.

Time on the Dashboard and the devices where the Auth App is running is the same.

@franco, i can give you access, feel free to test yourself, the firewall is absoulte default config, even the root pwd is unchanged.

yes i checked the dates on both ends.

i tried FreeOTP (Ver 2.0.1 (42)) on Android and was not able to add the token via QR Code. If i add the token manual (TOTP/6 Digits/SHA-1) it shows the same code as the Google Authenticator.

Hi,

can anybody confirm totp working on a fresh default install of 23.x? I installed opnsense in a kvm base vm.

I did all the steps to setup totp but its not working. the test is failing. i tried:

-multipe auth apps (google, ms)
-diffrent user
-reset to factory defaults
-token as suffix&prefix
-time settings on smartphone and opnsense

Error is always:     Authentication failed.

any ideas?

Yo