Azure VPN client doesn't work on Ubuntu 22.04 (bugfix is attached)

The "hack" above works. I updated the .so file and it works. Hoping for a patch to fix that issue.

Hi,

This isn’t actually a bug, the change has been in place since early 2025. You can check the official docs here:

• https://v4.hkg1.meaqua.org/en-us/azure/vpn-gateway/point-to-site-entra-gateway
• https://v4.hkg1.meaqua.org/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant
• https://v4.hkg1.meaqua.org/en-us/azure/vpn-gateway/point-to-site-entra-gateway

It looks like Microsoft really wants users to move away from manually registered apps and use the Microsoft-registered ones instead. You can see this in the manual configuration steps, which now redirect to the Microsoft-registered option.

Hope this helps!

Regards,
Javier

Nitsan hi there,

thanks for sharing this on the portal, I'm pretty sure u just saved a ton of people from headaches, really... 8-)

so yes, the azure vpn client on ubuntu 22.04 has this annoying bug where it sends the wrong applicationid. BUT the client somehow ignores it. am I right? what u did is spot on, editing the xml alone doesn't cut it because the client stubbornly uses the hardcoded id in liblinuxcore.so.

open /opt/microsoft/microsoft-azurevpnclient/lib/liblinuxcore.so in any hex editor (or even vim with %!xxd if u're feeling fancy). search for c632b3df-fb67-4d84-bdcf-b95ad541b5c8 and replace it with 41b23e61-6c1e-4545-b367-cd054e0ed4b4. save, restart the vpn client, and aha it should work now (at least i did it a few times ) microsoft will probably patch this eventually, but until then, this hack does the trick.

if u mess up the .so file, just reinstall the client. no biggie )

Let me know how its goes.

Best regards,

Alex

and "yes" if you would follow me at Q&A - personaly thx.
P.S. If my answer help to you, please Accept my answer
PPS That is my Answer and not a Comment

https://ctrlaltdel.blog/

Hello Nitsan

Apologies for the Inconvenience caused here,

Please note that configuring the Azure VPN Client with Microsoft Entra ID authentication for Linux is currently in the preview stage. When a service or feature is in preview, some functionalities may be limited, unstable, or subject to change. Certain constraints or unsupported configurations can lead to unexpected errors.

Refer: https://v4.hkg1.meaqua.org/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux?source=recommendations

Could you please share your answers or solutions that could help other community members find solutions for similar issues?

As this something which is not supported. We encourage customers to create a feedback item for this request on the feedback forum

Feedback link: https://feedback.azure.com/d365community

I hope this has been helpful!

If above is unclear and/or you are unsure about something add a comment below.

Hi

I was also facing this problem. Then I manually changed the .so file and it worked with one of my configuration files. I have two and one of them includes an entry for an internal DNS server. Ubuntu didn't allow to change it, but with the second file it was possible to connect.

It could be that it is not actually a bug and they want the VPN client for Ubuntu to have a different ID. I guess the key is the audience, on the XML profile you need to type: "c632b3df-fb67-4d84-bdcf-b95ad541b5c8" and also set it up on the Azure VPN gateway.

I still don't understand why the status of the Linux client is still labeled as "Preview" on this page:
https://v4.hkg1.meaqua.org/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux

It was last modified the 10th of February, 2025, so, I think it is enough time to test it. Either is Microsoft not interested in releasing a proper VPN client or they don't know how to do it.

I just hope that they improve their support for Linux, which is also been used on enterprise environments like my company.

Best regards

Josef