Unable to configure for 2FA

[Nikos Mavrogiannopoulos]

On Sat, Dec 23, 2023 at 11:16 AM Blason R <blason16 at gmail.com> wrote:
>
> Hi Team,
>
> I am trying to configure openconnect for 2FA while getting this error
> message and not sure why. I used the compile method and compiled the
> software accordingly.
>
> × ocserv.service - OpenConnect SSL VPN server
>      Loaded: loaded (/etc/systemd/system/ocserv.service; enabled;
> vendor preset: enabled)
>      Active: failed (Result: exit-code) since Sat 2023-12-23 10:14:10
> UTC; 3s ago
>        Docs: man:ocserv(8)
>     Process: 3331 ExecStart=/usr/local/sbin/ocserv --syslog
> --foreground --pid-file /run/ocserv.pid --config
> /etc/ocserv/ocserv.conf (code=exited, status=1/FAILURE)
>    Main PID: 3331 (code=exited, status=1/FAILURE)
>         CPU: 19ms
>
> Dec 23 10:14:10 vpn systemd[1]: Started OpenConnect SSL VPN server.
> Dec 23 10:14:10 vpn ocserv[3331]: note: skipping 'pid-file' config option
> Dec 23 10:14:10 vpn ocserv[3331]: unknown option 'otp'

Most likely you have compiled ocserv without support for otp. It needs
to be compiled with oath-devel. I suggest you use the precompiled
binaries available in your distribution.

Regards,
Nikos