OpenVPN with Google 2FA
-
OpenVPN server is set up with FreeRADIUS as auth source, Mobile-One-Time-Password turned on, users in FreeRADIUS. Config option static-challenge "Please enter your TOTP PIN" 1 is pushed to the clients.
When client connects from OpenVPN Connect with PIN (password in Connect) + TOTP from Google Authenticator, gets "User authentication failed". Reason is because client adds TOTP before PIN, and server expects it to be after PIN.
How can I reconfigure OpenVPN server on pfSense to accept TOTP after PIN?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.