Page 1 of 1

External Server Authentication Failure in SoftEther

Posted: Wed Sep 20, 2017 1:06 am
by binubk
I have a new Softether Installation running on windows 2012 R2 with all latest patches. System is configured with English US Language and Keyboard layout. This system is joined to a Windows 2012 Active Directory domain. The user installing the software is an enterprise administrator who is also a local administrator on the box

While creating a user in Softether, I am getting the following error. Any pointers to troubleshoot this issue is greatly appreciated

The Certificate Authentication function and the External Server
Authentication function have not been implemented on the
open-source version of SoftEther VPN yet. Choose either Anonymous
Authentication or Password Authentication instead.

Following is already tried
1. Uninstalled Softether
2. Removed and Added the computer back to the domain
3. Logged in with different Administrator ( Domain) accounts and installed Softether
4. Made sure there is no firewalls between DC and the Machine
5. Importing Softether configuration from a working machine

None of the above worked... Thanks in advance for any help

Re: External Server Authentication Failure in SoftEther

Posted: Thu Sep 21, 2017 12:03 am
by binubk
Any pointers? Thoughts? Ideas are welcome

Re: External Server Authentication Failure in SoftEther

Posted: Thu Sep 21, 2017 8:43 am
by cedar
Please try password auth.

Re: External Server Authentication Failure in SoftEther

Posted: Fri Sep 22, 2017 12:21 am
by binubk
cedar wrote:
> Please try password auth.

Hello cedar

I the password auth is working. But i am behind the External server Authentication ( AD). Any help you can provide would be Awesome

Regards
Binu B K

Re: External Server Authentication Failure in SoftEther

Posted: Tue Sep 26, 2017 8:10 am
by binubk
Good News!!

I managed to fix this issue... Its seems like soft ether does not like some IPs ( public IPs ) in Asia Pacific. Eventhough my IP was from Australia, the External Auth and NAT was blocked

To resolve this disable DDNS (Dynamic DNS Function)

To disable the Dynamic DNS Function, modify the configuration file of VPN Server.

The "declare root" directive has the "declare DDnsClient" directive. In this directive, you can switch "bool Disable" from false to true, and reboot the VPN Server, then the Dynamic DNS Function will be disabled.

Regards
Binu B K

Re: External Server Authentication Failure in SoftEther

Posted: Wed Sep 27, 2017 12:04 am
by binubk
Does any one know why Softether restricting some public IPs so that they can't use the full functionality?

Re: External Server Authentication Failure in SoftEther

Posted: Fri Oct 06, 2017 9:51 am
by cedar

Re: External Server Authentication Failure in SoftEther

Posted: Thu Oct 24, 2019 9:26 pm
by vpnusers
binubk wrote:
Tue Sep 26, 2017 8:10 am
Good News!!

I managed to fix this issue... Its seems like soft ether does not like some IPs ( public IPs ) in Asia Pacific. Eventhough my IP was from Australia, the External Auth and NAT was blocked

To resolve this disable DDNS (Dynamic DNS Function)

To disable the Dynamic DNS Function, modify the configuration file of VPN Server.

The "declare root" directive has the "declare DDnsClient" directive. In this directive, you can switch "bool Disable" from false to true, and reboot the VPN Server, then the Dynamic DNS Function will be disabled.

Regards
Binu B K

Can we safely delete the 9 lines of code having to do with the DDNS?