OpenVPN and RADIUS authentication (Solved)

[wmckay85]

Hello!

I've just finished my OpenVPN setup and exported the windows client for testing. That part seems to be set up correctly.

I'm having trouble with authentication through RADIUS. There is an existing 2008 R2 server that has NPS and a previous VPN policy in place for the old PPTP tunnel. What do I need to change to get authentication working? I can provide any details needed if I'm missing something. I think I might need to allow the tunnel type but I'm hesitant to just start checking boxes.

Edit:

Found this article
https://doc.pfsense.org/index.php/OpenVPN_with_RADIUS_via_Active_Directory

and it says I need a cert foir every user? That seems like a step backwards since with PPTP I can use domain credentials to authenticate.

Suggestions?

Edit:

I followed the article and made a new NPS setup on a new DC, this solved my auth errors.