Page MenuHomeVyOS Platform
Create Task
Maniphest T7287

VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS
Closed, ResolvedPublicBUG
Actions

Description

VPN Openconnect does not check dictionary key server with authentication mode RADIUS
To reproduce:

set vpn openconnect authentication mode radius
set vpn openconnect network-settings client-ip-settings subnet 100.64.55.0/24
commit

commit:

vyos@r14# commit
[ vpn openconnect ]
Traceback (most recent call last):
  File "/usr/libexec/vyos/services/vyos-configd", line 144, in run_script
    script.verify(c)
  File "/usr/libexec/vyos//conf_mode/vpn_openconnect.py", line 96, in verify
    if not ocserv["authentication"]['radius']['server']:
           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
KeyError: 'server'

[[vpn openconnect]] failed
Commit failed
[edit]
vyos@r14# 

vyos@r14# run show ver
Version:          VyOS 2025.03.23-0020-rolling
Release train:    current
Release flavor:   generic

Built by:         autobuild@vyos.net
Built on:         Sun 23 Mar 2025 00:20 UTC
Build UUID:       75ea1ea5-7266-4cbd-b615-8ed7197c1c7e
Build commit ID:  feb144cdd771c4

Details

Version
VyOS 2025.03.23-0020-rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

Viacheslav created this task.Mar 26 2025, 1:36 PM
Viacheslav triaged this task as Normal priority.
Viacheslav added projects: VyOS 1.5 Circinus, VyOS 1.4 Sagitta (1.4.3).
pasik subscribed.Mar 26 2025, 4:31 PM
natali-rs1985 changed the task status from Open to In progress.May 19 2025, 9:30 AM
natali-rs1985 claimed this task.
natali-rs1985 added a comment.May 19 2025, 9:51 AM

https://github.com/vyos/vyos-1x/pull/4513

natali-rs1985 mentioned this in rVYOSONEX6315ca045a26: openconnect: T7287: VPN Openconnect does not check dictionary key server with….May 20 2025, 1:31 PM
Restricted Repository Identity mentioned this in rVYOSONEX72575f9d6062: Merge pull request #4513 from natali-rs1985/T7287.May 20 2025, 1:31 PM
natali-rs1985 closed this task as Resolved.May 23 2025, 11:12 AM
natali-rs1985 moved this task from Need Triage to Completed on the VyOS Rolling board.
natali-rs1985 moved this task from Open to Finished on the VyOS 1.5 Circinus board.
natali-rs1985 moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
dmbaturin edited projects, added VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.Jul 9 2025, 12:44 PM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
dmbaturin moved this task from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.Jul 15 2025, 11:48 AM
dmbaturin mentioned this in 1.4.3.Jul 17 2025, 8:18 AM
syncer renamed this task from VPN Openconnect does not check dictionary key server with authentication mode RADIUS to VPN Openconnect does not check the dictionary key server with the authentication mode RADIUS.Jul 17 2025, 12:36 PM