53 lines
2.2 KiB
Plaintext
53 lines
2.2 KiB
Plaintext
# --- general
|
|
debug = 0
|
|
okta_url = https://adobe.okta.com
|
|
vpn_url = https://vpn.adobe.com
|
|
|
|
# "gateway_url" forces authentication with specific gateway.
|
|
#gateway_url = https://ny1-gw.my.lan
|
|
# "another_dance" (0/1) defines whether to do second authentication, i.e.,
|
|
# after authentication with portal, do another authentication with gateway.
|
|
another_dance = 1
|
|
|
|
username =
|
|
password =
|
|
# "gateway" is a preferred gateway selection, which portal asks for.
|
|
gateway = dublin-1.vpn.adobe.com
|
|
|
|
# --- multi-factor authentication
|
|
#mfa_order = totp sms push webauthn
|
|
#sms.okta = 0
|
|
#totp.okta = ABCDEFGHIJKLMNOP
|
|
#totp.google = ABCDEFGHIJKLMNOP
|
|
#totp.symantec = ABCDEFGHIJKLMNOP
|
|
|
|
# --- certificates
|
|
# any defined "*_cert" is path to readable and unencrypted certificate file.
|
|
# "vpn_url_cert" and "okta_url_cert" are used to verify relevant URLs.
|
|
# "vpn_cli_cert" and "okta_cli_cert" are used as client certificate.
|
|
# any other "*_cert" and "vpn_url_cert" will be added to certs (see below).
|
|
#
|
|
#okta_url_cert = okta.pem
|
|
#okta_cli_cert = okta_cli.pem
|
|
#vpn_url_cert = vpn.pem
|
|
#vpn_cli_cert = vpn_cli.pem
|
|
#
|
|
# "certs" is (optional) path to certificate file, which will be overwritten
|
|
# and stored with all certificates encountered (in config and portal config).
|
|
# by default, "certs" is not specified, so a temporary file will be created.
|
|
# it will be used to verify gateways and passed to openconnect executable.
|
|
#
|
|
#certs = certs.pem
|
|
|
|
# --- execution
|
|
# "execute" (0/1) defines if openconnect (as specified with "openconnect_cmd"
|
|
# and "openconnect_args") is executed after OKTA authentication dance.
|
|
execute = 1
|
|
openconnect_cmd = sudo openconnect
|
|
openconnect_args = --quiet --syslog --timestamp --deflate --reconnect-timeout=180 --background --pid-file=/var/run/openconnect.pid --mtu=1326 --script="/bin/cat ~/.openconnect/AdobeCorp.hosts | /usr/bin/xargs $HOMEBREW_PREFIX/bin/vpn-slice --prevent-idle-timeout --route-internal --route-splits --name AdobeCorp --domain corp.adobe.com --"
|
|
# --csd-wrapper=~/.openconnect/hipreport.sh
|
|
|
|
# "openconnect_fmt" is manually specified format what to pipe to openconnect.
|
|
# supports <cookie>, <username>, etc. other characters are provided as-is
|
|
#openconnect_fmt = <cookie><cookie>
|