Access Server: User Permissions page displays "An error occurred while rendering the response."

Important Note

"An error occurred while rendering the response" can appear on other pages or tabs in the Admin Web UI and require different resolution steps. This article ONLY addresses this error on the User Permissions page.

Description

On Access Server, while navigating the Admin Web UI, you may encounter an issue rendering the User Permissions page. The following error message displays:

This may happen due to a user entry referencing a non-existent group within its properties, which can be caused by a typo while editing user properties via CLI or a group mapping post-authentication script. The following error message can also be seen on the Access Server logs under /var/log/openvpnas.log:

2025-01-29T16:00:40+0000 [stdout#info] [WEB] OUT: "\tKeyError: 'admin'"

Note: In the log above admin represents the name of the non-existent group, but this can be any name.

Solution

You must remove the user property referencing the non-existent group to fix this:

1. Connect to the Access Server console and get root privileges.
2. Identify the user referencing the non-existent group using the following command:
   

   cd /usr/local/openvpn_as/scripts/
   ./sacli UserPropGet

   • In the following example, we can observe the user jose is referencing a group that doesn't exist (with the property conn_group set to admin), as the group is not listed within the output
     

     root@openvpnas:/usr/local/openvpn_as/scripts# sacli UserPropGet
     
     {
     
       "__DEFAULT__": {
     
         "def_deny": "false",
     
         "prop_autogenerate": "true",
     
         "prop_force_lzo": "false",
     
         "type": "user_default"
     
       },
     
       "jose": {
     
         "conn_group": "admin",
     
         "prop_superuser": "true",
     
         "pvt_password_digest": "$P$TdWTw3B0Aya3Z1L2i2gIqw==$WqbDz/+LC91ZVbXFoQf/jE2eQrK5rcyfuMWY7Vy4qVQ=",
     
         "type": "user_compile",
     
         "user_auth_type": "local"
     
       },
     
       "openvpn": {
     
         "prop_superuser": "true",
     
         "pvt_google_auth_secret": "XNPEYCEHCDC5JYOR",
     
         "pvt_google_auth_secret_locked": "false",
     
         "pvt_password_digest": "$P$oZO8rWIaMao+sMPYcgLK9A==$waTrVMsNAhiVqDTOsQQmzbrK73ThI7oqoblmZ2NJK1U=",
     
         "type": "user_compile",
     
         "user_auth_type": "local"
     
       }
     }

3. Remove the property with the following commands:
   

   ./sacli --user "<username>" --key 'conn_group' UserPropDel
   ./sacli start

   • In our example, that would be:

     ./sacli --user "jose" --key 'conn_group' UserPropDel
     ./sacli start

4. Once done, refresh your browser, and the error shouldn't display.

If you have additional questions, please submit a ticket.