From bb6893c3cc4c3088ada18198fec65b3b1d921b51 Mon Sep 17 00:00:00 2001
From: Oliver Surke <oliver@surke.de>
Date: Fri, 11 Nov 2022 13:27:10 +0100
Subject: [PATCH] =?UTF-8?q?=E2=80=9E.gp-okta.conf=E2=80=9C=20hinzuf=C3=BCg?=
 =?UTF-8?q?en?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gp-okta.conf | 52 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 .gp-okta.conf

diff --git a/.gp-okta.conf b/.gp-okta.conf
new file mode 100644
index 0000000..be4e043
--- /dev/null
+++ b/.gp-okta.conf
@@ -0,0 +1,52 @@
+# --- general
+debug = 0
+okta_url = https://adobe.okta.com
+vpn_url = https://vpn.adobe.com
+
+# "gateway_url" forces authentication with specific gateway.
+#gateway_url = https://ny1-gw.my.lan
+# "another_dance" (0/1) defines whether to do second authentication, i.e.,
+# after authentication with portal, do another authentication with gateway.
+another_dance = 1
+
+username = 
+password = 
+# "gateway" is a preferred gateway selection, which portal asks for.
+gateway = dublin-1.vpn.adobe.com
+
+# --- multi-factor authentication
+#mfa_order = totp sms push webauthn
+#sms.okta = 0
+#totp.okta = ABCDEFGHIJKLMNOP
+#totp.google = ABCDEFGHIJKLMNOP
+#totp.symantec = ABCDEFGHIJKLMNOP
+
+# --- certificates
+# any defined "*_cert" is path to readable and unencrypted certificate file.
+# "vpn_url_cert" and "okta_url_cert" are used to verify relevant URLs.
+# "vpn_cli_cert" and "okta_cli_cert" are used as client certificate.
+# any other "*_cert" and "vpn_url_cert" will be added to certs (see below).
+#
+#okta_url_cert = okta.pem
+#okta_cli_cert = okta_cli.pem
+#vpn_url_cert = vpn.pem
+#vpn_cli_cert = vpn_cli.pem
+#
+# "certs" is (optional) path to certificate file, which will be overwritten
+# and stored with all certificates encountered (in config and portal config).
+# by default, "certs" is not specified, so a temporary file will be created.
+# it will be used to verify gateways and passed to openconnect executable.
+#
+#certs = certs.pem
+
+# --- execution
+# "execute" (0/1) defines if openconnect (as specified with "openconnect_cmd"
+# and "openconnect_args") is executed after OKTA authentication dance.
+execute = 1
+openconnect_cmd = sudo openconnect
+openconnect_args = --quiet --syslog --timestamp --deflate --reconnect-timeout=180 --background --pid-file=/var/run/openconnect.pid --mtu=1326 --script="/bin/cat ~/.openconnect/AdobeCorp.hosts | /usr/bin/xargs $HOMEBREW_PREFIX/bin/vpn-slice --prevent-idle-timeout --route-internal --route-splits --name AdobeCorp --domain corp.adobe.com --"
+# --csd-wrapper=~/.openconnect/hipreport.sh
+
+# "openconnect_fmt" is manually specified format what to pipe to openconnect.
+# supports <cookie>, <username>, etc. other characters are provided as-is
+#openconnect_fmt = <cookie><cookie>