# OpenVPN disconnect after exact 1 hour

**URL:** <https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535>\
**Category:** Pritunl VPN\
**Created:** [October 24, 2024, 1:36pm UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535 "2024-10-24T13:36:04Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![andreas.metzinger](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/a/c67d28/32.png) [@andreas.metzinger](https://forum.pritunl.com/u/andreas.metzinger)\
**Post date:** [October 24, 2024, 1:36pm UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/1 "2024-10-24T13:36:04Z")

</div>

Since I updated the pritunl server to the latest version, my clients disconnect after exact 1 hour.

In the logs, I get the following:  
[VPN-Edgeserver01][2024-10-23 09:18:00,269][ERROR] User failed auth update check  
server\_id = “5b339226572cc102f1a4a472”  
instance\_id = “6718923e230aa9cb1e9aa919”  
user\_id = “60c30c4cc2495c32659a176b”  
Traceback (most recent call last):  
File “/usr/lib/pritunl/usr/lib/python3.9/threading.py”, line 937, in \_bootstrap  
self.\_bootstrap\_inner()  
File “/usr/lib/pritunl/usr/lib/python3.9/threading.py”, line 980, in \_bootstrap\_inner  
self.run()  
File “/usr/lib/pritunl/usr/lib/python3.9/threading.py”, line 917, in run  
self.\_target(\*self.\_args, \*\*self.\_kwargs)  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/clients/clients.py”, line 2507, in \_auth\_check\_thread  
logger.error(‘User failed auth update check’,  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/logger/ **init**.py”, line 55, in error  
kwargs[‘traceback’] = traceback.format\_stack()

There’s another server (privacyIDEA) responsible for the RADIUS (OTP Token) authentication.

Here I get:  
‘wrong otp value. previous otp used again’

I think, that’s because the option “Enable Client Reconnect” is selected.

Environment:  
Pritunl server version v1.32.4057.36 2a185a  
OpenVPN client version 3.5.1.3946

Any ideas on how to fix this issue?

Regards  
Andy

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [October 24, 2024, 3:14pm UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/2 "2024-10-24T15:14:26Z")

</div>

The auth update checks the users single sign-on status every hour to disconnect users who are disabled or removed from single sign-on. If the Radius server expects a OTP this feature will need to be disabled by running `sudo pritunl set app.sso_connection_check false`

---

<div class="post-metadata">

**Author:** ![andreas.metzinger](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/a/c67d28/32.png) [@andreas.metzinger](https://forum.pritunl.com/u/andreas.metzinger)\
**Post date:** [October 24, 2024, 4:12pm UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/3 "2024-10-24T16:12:41Z")

</div>

Great! Thanks for the info.  
I give it a shot and see how it goes!

---

<div class="post-metadata">

**Author:** ![andreas.metzinger](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/a/c67d28/32.png) [@andreas.metzinger](https://forum.pritunl.com/u/andreas.metzinger)\
**Post date:** [October 25, 2024, 5:16am UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/4 "2024-10-25T05:16:46Z")

</div>

Thanks again zach!  
This did the trick. I wonder, if this feature was different in previous versions of pritunl 🤔  
Because the message ‘wrong otp value. previous otp used again’ was also seen on the RADIUS server with the old version without the user been disconnected.  
Anyway, it is what it is.

Have a great weekend ahead!  
Andy

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [October 25, 2024, 9:23am UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/5 "2024-10-25T09:23:01Z")

</div>

This was a recently added feature. Previously there was a sync to obtain an updated list of user groups to perform a recheck of the users access based on groups. This is only effective for group based configurations, organizations cannot change without removing the user. This would not disconnect users on a failed sync. There are also older releases that have no sync during connection. Current releases sync both the user status and user groups.

---

<div class="post-metadata">

**Author:** ![andreas.metzinger](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/a/c67d28/32.png) [@andreas.metzinger](https://forum.pritunl.com/u/andreas.metzinger)\
**Post date:** [October 25, 2024, 10:07am UTC](https://forum.pritunl.com/t/openvpn-disconnect-after-exact-1-hour/2535/6 "2024-10-25T10:07:03Z")

</div>

Thanks für the Update 👍
