Aggressive forced reauths - YubiKey + Google SSO

Pritunl Pritunl VPN
1

We are currently running this setup:

pritunl v1.32.3897.75
Clients are mostly using the recent official pritunl clients. These are our cache settings:

/opt/pritunl # pritunl get app.sso_cache
app.sso_cache = false
/opt/pritunl # pritunl get app.sso_client_cache
app.sso_client_cache = true
/opt/pritunl # pritunl get app.sso_cache_timeout
app.sso_cache_timeout = 28800
/opt/pritunl # pritunl get app.sso_client_cache_timeout
app.sso_client_cache_timeout = 604800

We are finding that while the cache is working well for some folks, it is causing others to be prompted to use their YubiKey multiple times in a day sometimes.

Is there anything that can help us troubleshoot this - where/how can we figure out what is causing this excessive re-authentication?

2

If the options were changed the profile needs to resync with the server. Click settings in the client and check the last configuration sync. This timestamp only changes if a changed configuration was updated. If the sync does not work the client will retain the old configuration which may not have the cache enabled. The profile can be imported again to update.