os-mnemo/pan-globalprotect-okta
1
0
Fork 0
mirror of https://github.com/os-mnemo/pan-globalprotect-okta synced 2026-07-31 15:54:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Pass prelogin-cookie if portal-userauthcookie is empty

Browse Source
This commit is contained in:
Aaron Lindsay
2018-09-11 09:14:51 -04:00
parent 58c1d37f93
commit 5f24bc5ec6
1 changed files with 12 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gp-okta.py
+12 -5
View File
@@ -462,13 +462,20 @@ def main():
log('saml-username: {0}'.format(saml_username)) log('saml-username: {0}'.format(saml_username))
log('prelogin-cookie: {0}'.format(prelogin_cookie)) log('prelogin-cookie: {0}'.format(prelogin_cookie))
if userauthcookie == 'empty' and prelogin_cookie != 'empty':
cookie_type = "gateway:prelogin-cookie"
cookie = prelogin_cookie
else:
cookie_type = "portal:portal-userauthcookie"
cookie = userauthcookie
username = saml_username username = saml_username
cmd = conf.get('openconnect_cmd') or 'openconnect' cmd = conf.get('openconnect_cmd') or 'openconnect'
cmd += ' --protocol=gp -u \'{0}\'' cmd += ' --protocol=gp -u \'{0}\''
cmd += ' --usergroup portal:portal-userauthcookie' cmd += ' --usergroup {1}'
cmd += ' --passwd-on-stdin ' + conf.get('openconnect_args', '') + ' \'{1}\'' cmd += ' --passwd-on-stdin ' + conf.get('openconnect_args', '') + ' \'{2}\''
cmd = cmd.format(username, conf.get('vpn_url')) cmd = cmd.format(username, cookie_type, conf.get('vpn_url'))
gw = (conf.get('gateway') or '').strip() gw = (conf.get('gateway') or '').strip()
bugs = '' bugs = ''
if conf.get('bug.nl', '').lower() in ['1', 'true']: if conf.get('bug.nl', '').lower() in ['1', 'true']:
@@ -476,9 +483,9 @@ def main():
if conf.get('bug.username', '').lower() in ['1', 'true']: if conf.get('bug.username', '').lower() in ['1', 'true']:
bugs += '{0}\\n'.format(username.replace('\\', '\\\\')) bugs += '{0}\\n'.format(username.replace('\\', '\\\\'))
if len(gw) > 0: if len(gw) > 0:
pcmd = 'printf \'' + bugs + '{0}\\n{1}\''.format(userauthcookie, gw) pcmd = 'printf \'' + bugs + '{0}\\n{1}\''.format(cookie, gw)
else: else:
pcmd = 'printf \'' + bugs + '{0}\''.format(userauthcookie) pcmd = 'printf \'' + bugs + '{0}\''.format(cookie)
print() print()
if conf.get('execute', '').lower() in ['1', 'true']: if conf.get('execute', '').lower() in ['1', 'true']:
cmd = shlex.split(cmd) cmd = shlex.split(cmd)