I have setted up radius with AD integration and google authenticator. When the user logins at the connection, the authentication flow works flawlessly. When some time passes the auth update task is fired and the user gets disconnected as the password sent to the radius server is some type of challenge that starts with CRV1:: , this obviously makes the reauth to fail and the user gets kicked down.
Setup is pritunl v1.32.3897.75