„.gp-okta.conf“ hinzufügen

2022-11-11 13:27:10 +01:00
parent 05226f1cdd
commit bb6893c3cc
1 changed files with 52 additions and 0 deletions
@@ -0,0 +1,52 @@
+# --- general
+debug = 0
+okta_url = https://adobe.okta.com
+vpn_url = https://vpn.adobe.com
+
+# "gateway_url" forces authentication with specific gateway.
+#gateway_url = https://ny1-gw.my.lan
+# "another_dance" (0/1) defines whether to do second authentication, i.e.,
+# after authentication with portal, do another authentication with gateway.
+another_dance = 1
+
+username = 
+password = 
+# "gateway" is a preferred gateway selection, which portal asks for.
+gateway = dublin-1.vpn.adobe.com
+
+# --- multi-factor authentication
+#mfa_order = totp sms push webauthn
+#sms.okta = 0
+#totp.okta = ABCDEFGHIJKLMNOP
+#totp.google = ABCDEFGHIJKLMNOP
+#totp.symantec = ABCDEFGHIJKLMNOP
+
+# --- certificates
+# any defined "*_cert" is path to readable and unencrypted certificate file.
+# "vpn_url_cert" and "okta_url_cert" are used to verify relevant URLs.
+# "vpn_cli_cert" and "okta_cli_cert" are used as client certificate.
+# any other "*_cert" and "vpn_url_cert" will be added to certs (see below).
+#
+#okta_url_cert = okta.pem
+#okta_cli_cert = okta_cli.pem
+#vpn_url_cert = vpn.pem
+#vpn_cli_cert = vpn_cli.pem
+#
+# "certs" is (optional) path to certificate file, which will be overwritten
+# and stored with all certificates encountered (in config and portal config).
+# by default, "certs" is not specified, so a temporary file will be created.
+# it will be used to verify gateways and passed to openconnect executable.
+#
+#certs = certs.pem
+
+# --- execution
+# "execute" (0/1) defines if openconnect (as specified with "openconnect_cmd"
+# and "openconnect_args") is executed after OKTA authentication dance.
+execute = 1
+openconnect_cmd = sudo openconnect
+openconnect_args = --quiet --syslog --timestamp --deflate --reconnect-timeout=180 --background --pid-file=/var/run/openconnect.pid --mtu=1326 --script="/bin/cat ~/.openconnect/AdobeCorp.hosts | /usr/bin/xargs $HOMEBREW_PREFIX/bin/vpn-slice --prevent-idle-timeout --route-internal --route-splits --name AdobeCorp --domain corp.adobe.com --"
+# --csd-wrapper=~/.openconnect/hipreport.sh
+
+# "openconnect_fmt" is manually specified format what to pipe to openconnect.
+# supports <cookie>, <username>, etc. other characters are provided as-is
+#openconnect_fmt = <cookie><cookie>