From f7fe9b5529c96214eb75fc5a364deb32445a3d0a Mon Sep 17 00:00:00 2001 From: Daniel Lenski Date: Fri, 13 Apr 2018 13:15:15 -0700 Subject: [PATCH] use openconnect-gp's new mechanism for specifying an alternative-secret field for the login form submission, instead of 'passwd' This was added in the `fun_with_cookie` branch. See: https://github.com/dlenski/openconnect/commits/fun_with_cookies https://github.com/dlenski/openconnect/pull/98#issuecomment-380923571 --- gp-okta.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gp-okta.py b/gp-okta.py index 6dc42e8..6902e41 100755 --- a/gp-okta.py +++ b/gp-okta.py @@ -305,7 +305,7 @@ def main(): userauthcookie = paloalto_getconfig(conf, s, saml_username, prelogin_cookie) log('portal-userauthcookie: {0}'.format(userauthcookie)) - cmd = '\nopenconnect --protocol=gp -u "{0}" --userauthcookie="{1}" {2}' + cmd = '\necho "{1}" | openconnect --protocol=gp -u "{0}"/portal:portal-userauthcookie --passwd-on-stdin {2}' print(cmd.format(saml_username, userauthcookie, conf.get('vpn_url')))