Access Server 2.13 Release Notes and Version Updates
Added VPN client gateway (site-to-site) functionality to Clustering mode.
Improved security so that MFA failures count against lockout policy.
Improved security so that MFA replay is not possible.
Fixed a regression where AS would not start if the OS has only IPv6 DNS servers configured.
Fixed a regression where LOG_ROTATE_LENGTH setting was ignored.
Fixed a bug where the real IP of the VPN client did not show correctly when DCO was enabled.
Fixed a bug where changing auto-login permission could reset TOTP MFA enrollment.
Fixed a bug where reconfiguring SAML settings via metadata URL/file would turn off SAML authentication.
Fixed some minor issues in the Admin Web UI in deprecated layer 2 mode.
Released bundled clients package v30 with Connect v3.4.4.3412 for Windows and Connect v3.4.9.4830 for macOS.
New features:
Added support for Debian 12 (Bookworm).
Bug fixes and improvements:
Updated Twisted library to 21.7.
Updated OpenVPN2 core to 2.6.8.
Updated to Python 3.8 on CentOS 7 and Red Hat 7.
Improved internal load-balancing logic of OpenVPN multi-daemon mode.
Improved sacli activeconfig command to show more information.
Improved sacli support command to hide certificates but show metadata instead.
Fixed a bug where lack of vpn.server.cipher setting caused an error in cluster mode.
Fixed a bug where an invalid LDAP debug level setting would throw an error.
Fixed a regression where sacli ldapexplorer would not work anymore.
Fixed a bug where site-to-site routes could end up missing.
Fixed a bug where Jumpcloud SAML metadata file could not be downloaded.
Fixed a bug in NetBIOS settings in the Admin Web UI.
Fixed a crash in DCO when using TCP.
Fixed a bug when building DCO kernel module on Red hat 9.3.
Released bundled clients package v29 with Connect v3.4.3.3337 for Windows and Connect v 3.4.7.4745 for macOS.
Released DCO kernel module v0.2.20231117.
Important notes:
On CentOS 7 and Red Hat 7, we now require Python 3.8. This is done by using the SCL repositories. The installation instructions for these operating systems have been updated to include instructions to enable the SCL repositories.
We have changed behavior so that the old vpn.server.cipher config is not automatically included in the supported data ciphers anymore. This should only affect you if you are using the older CBC ciphers on OpenVPN 2.3 or older clients. In almost all cases, you are already using the newer AEAD-type ciphers and are not affected. If you are in a rare situation where you are affected by this change, you can manually add the necessary cipher to the supported data ciphers.
Release branch 2.13.x will be the last major version that supports CentOS 7, Red Hat 7, and Debian 10. These operating systems will reach end-of-life in June 2024. We will also drop support of Amazon Linux 2 after this major release version. We recommend using Ubuntu 22.04 LTS, Debian 12, or Red Hat 9.