softether radius authentification

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
aferpe
Posts: 1
Joined: Mon Jul 10, 2017 8:12 am

softether radius authentification

Post by aferpe » Mon Jul 10, 2017 8:39 am

Hello,

we are using softether and tekradius. Trying to implement push authentification like duo.com gave me some trouble as i am only able to set radius timeout to 10 seconds. If you want to use push authentification the authentification server will send a sms or push request to an app on your mobile phone. This ofcourse sometimes will take longer than 10 seconds especially if the user has to unlock his phone. Duo.com for example advices a 60 second time-out. So this is a reason we are not able to use push authentification and now use off-line otp passwords as a workaround.

But there is an additional issue. The "do not store passwords" feature in the client does not seem to work as expected. If i start a connection there is always an authentification request to the server with the old (stored) password. As these are one-time there will be an authentification failure. Only after the authentification failure i am able to enter the new correct password and the connection will be established. If i setup a new clear connection profile the first authentification will also use a blank password.

So for me entering a password is only possible after a denied authentification request.

Has somebody a similar issue or can help solving this?

dmarlow
Posts: 2
Joined: Mon Feb 19, 2018 6:00 pm

Re: softether radius authentification

Post by dmarlow » Wed Apr 11, 2018 4:14 pm

I too have had this issue. It's frustrating. If anyone else is listening, please allow the timeout to be configurable.

thisjun
Posts: 2647
Joined: Mon Feb 24, 2014 11:03 am

Re: softether radius authentification

Post by thisjun » Fri Apr 27, 2018 3:40 am

If you have any request for function, I recommend to post the issue in github.
https://github.com/SoftEtherVPN/SoftEtherVPN/issues

Post Reply