Post-Auth script to validate UUID, not MAC address

[oraps1999]

Per https://openvpn.net/as-docs/tutorial...post-auth.html and https://swupdate.openvpn.net/scripts...ss_checking.py, the post-auth script is checking against the OpenVPN client's MAC address on macOS.

On the release macOS 15 Sequoia release, it has the enabled the Private WiFI Address setting. Once the Private WiFi Address setting is set to "rotating", the OpenVPN client can send a random MAC address to the OpenVPN server. Thus, the post-auth script will find the previously registered MAC address and the new rotating MAC address to be different, causing failed authentication. The Private WiFI Address setting cannot be disabled completely per script. It is dependent per WiFI profile. .

On the OpenVPN client ovpn.log file on macOS 15 Sequoia, I notice that the UV_UUID=<my-unique-UUID> is set along with the IV_HWADDR field value.

I have these questions:

1. Does the OpenVPN client on macOS send the UV_UUID value to the OpenVPN server?
2. If yes, does the UV_UUID get saved to the user properties database?
3. If yes, how can the UV_UUID be retrieved on the post-auth script?

The example post-auth script shows how to retrieve the MAC address:

hw_addr = authcred.get('client_hw_addr') # MAC address reported by the VPN client

Is there an equivalent for UUID on the macOS?