os-mnemo/pan-globalprotect-okta
1
0
Fork 0
mirror of https://github.com/os-mnemo/pan-globalprotect-okta synced 2026-09-29 09:58:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
109 Commits 1 Branch 0 Tags
7128b2996f1c950a8ddcd1e13d82c5564e2f5864
Commit Graph
64 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andris Raugulis f88beb9d07 Provide other MFA in config. Fixes #22. 2020-05-26 19:12:24 +00:00
Andris Raugulis b637ea9028 Debug option should not be exposed by default in config. 2020-05-26 14:52:56 +00:00
Andris Raugulis 71e7944cc3 Refactor config file reading (also with GnuGP). 2020-05-26 12:36:36 +00:00
Andris Raugulis bea8cc8825 Fix some pylint reported issues. 2020-05-26 11:56:57 +00:00
Andris Raugulis da0638fd12 Add short arguments. Reorder imports. Shorten main(). 2020-05-26 11:25:00 +00:00
Andris Raugulis 31f986718d Upgrade Dockerfile (anybody using it?). 2020-05-26 02:25:27 +00:00
Andris Raugulis 18b0ea085f Some pylint fixes. 2020-05-26 02:08:21 +00:00
Andris Raugulis d801a6e91e Refactor portal/gateway authentication to be more clear for code reader. 
While there, fix some issues, regarding choosing either portal or gateway.
 2020-05-26 01:49:21 +00:00
Andris Raugulis 246ea3a8d3 Pass gateway in command-line, not in stdin. 2020-05-25 22:40:02 +00:00
Andris Raugulis f91eb3843a Fix temporary certificate file removal, mentioned in #21. 2020-05-25 22:28:55 +00:00
Andris Raugulis f0a3c8ec2c Rework certificate verification. 2020-05-25 22:24:49 +00:00
Andris Raugulis b53657b767 Do not use client certificate, if not specified. 2020-05-25 19:52:18 +00:00
Andris Raugulis 15d03e2ca2 Fix usage of client certificates, as noted in #21. 2020-05-25 18:04:52 +00:00
Andris Raugulis b977409ae0 Write bytes, not str. 2020-05-23 01:19:57 +00:00
Andris Raugulis bc46b987d6 Rename example URLs. 2020-05-23 01:16:43 +00:00
Andris Raugulis 69ebe59400 Add flush(). 2020-05-23 01:13:21 +00:00
Andris Raugulis 9eea095bda Rework certificate parts. Use different client certificates. 
Reshape and reword configuration file.
 2020-05-23 01:06:52 +00:00
Andris Raugulis 3e6b63285c Ignore ".mypy_cache" directory. 2020-05-22 22:47:08 +00:00
Andris Raugulis 28ad0ddbe5 Finish up MyPy type checking. While there, refactor a bit. 2020-05-22 22:45:24 +00:00
Andris Raugulis d5d83bb009 Add simple MyPy typing. All good, except file handle in conf. 2020-05-21 23:14:57 +00:00
Andris Raugulis 2938e4d8dc Prospector fixes. 2020-05-21 19:50:21 +00:00
Andris Raugulis 518ce1ba67 Fix link in readme. 2020-05-21 18:58:48 +00:00
Andris Raugulis d1c5040b9d Update readme. 2020-05-21 18:57:52 +00:00
Andris Raugulis f70bca8245 Update know issues section. 2020-05-21 18:34:52 +00:00
Andris Raugulis 5845d335bf Update know issues section. 2020-05-21 18:33:36 +00:00
Andris Raugulis 782f71cfb2 Python3 fixes. 2020-05-21 18:27:13 +00:00
Andris Raugulis 679018c6f9 Fix OpenConnect 8.05+ compatibility by implementing new feature: 
- auto-detect openconnect version and required stdin pipe format
- support manual format specification (for future openconnect bugs)
- remove "bug.*" configuration options as they are unnecessary now
 2020-05-21 18:21:22 +00:00
Andris Raugulis b5dffd6ab2 Do not error out, when OKTA redirects to unknown (nearest) "gateway" portal. 2020-05-21 16:32:34 +00:00
Andris Raugulis 011dc55493 Add more debugging. 2020-05-21 16:14:03 +00:00
Andris Raugulis 2a1fb948fc Use gateway as choice in openconnect and gateway_url as direct authentication URL. 
Rename `--show-list-of-gateways` to `--list-gateways` and fix it (sometimes gateways can be listed only after authentication).
Reorder configuration file to be more sane.
 2020-05-21 14:21:54 +00:00
Andris Raugulis a808b2486d Add ChangeLog. 2020-05-21 09:36:31 +00:00
Andris Raugulis 7bcd9eb363 Add Okta transaction state (work around password expiration warning). 2019-02-14 03:40:11 +00:00
Andris Raugulis 2adb621e38 Debug HTTP headers. 2019-01-24 15:50:12 +02:00
Andris Raugulis 281aa34247 Do OKTA redirect dance until it is sucessful. 2019-01-24 15:02:20 +02:00
Andris Raugulis 7528cb8875 Fix relative URLs. 2019-01-24 14:41:16 +02:00
Andris Raugulis 76b2861a7c Remove whitespace and fix style. 2019-01-24 14:28:22 +02:00
Andris Raugulis f29ea6f0bb Reduce code by using common send_req. Refactor get_redirect_url. 2019-01-24 14:18:23 +02:00
Andris Raugulis d548cad653 Implement SMS verification. 2019-01-22 13:29:04 +00:00
Andris Raugulis 45ef74bca3 Implement MFA selection priority (by mfa_order, by line number, by value). 2019-01-22 13:19:28 +00:00
Andris Raugulis 1f8db7d309 Escape backslash in username and other fields, i.e., use single quote. 
Add work-around for additional username input.
 2018-10-08 00:12:59 +00:00
Andris Raugulis 263bd98b41 Fix typo in Dockerfile. 2018-09-07 01:06:19 +03:00
Andris Raugulis 73c88aeb16 Make openconnect_args optional also in code. 2018-09-06 17:09:40 +03:00
Andris Raugulis c445c828e9 Mention Python compatiblity. 2018-09-04 18:37:19 +03:00
Andris Raugulis 36106a879a Python 3 compatibility. 2018-09-04 18:34:41 +03:00
Andris Raugulis 1520db2cec Hide cookie in process list (stop using shell=True). 2018-09-04 18:14:39 +03:00
Andris Raugulis ac0066adad Add supported OS'es. 2018-09-04 17:10:36 +03:00
Andris Raugulis 9d8f69e895 Fix pulled Dockerfile. 2018-09-04 16:35:46 +03:00
Andris Raugulis 7e09f5771f Fix shebang and rename container and script. 2018-09-04 15:45:55 +03:00
Andris Raugulis a050e961a8 Fix mistake in option naming. 2018-09-03 19:05:13 +03:00
Andris Raugulis 11a7d1b9cb Make note about dependencies. 2018-09-03 18:54:39 +03:00
Andris Raugulis 6bff117654 Fix typo in option name. 2018-09-03 18:46:37 +03:00
Andris Raugulis dafd415029 Rework readme. 2018-09-03 18:44:42 +03:00
Andris Raugulis f677133a32 Add initial readme. 2018-09-03 18:39:38 +03:00
Andris Raugulis 51b8725260 Do not force sudo in default configuration. 2018-09-03 15:05:35 +03:00
Andris Raugulis 76597ea412 Request username/password if empty. Override configuration file 
settings with environment variables (GP_*). Implement openconnect
command (for sudo/doas cases) and args (for custom vpnc scripts).
Implement execution.
 2018-09-03 15:03:16 +03:00
Andris Raugulis 1df901118d Add gateway support. Add workaround for newline bug in openconnect. 2018-09-03 13:40:29 +03:00
Andris Raugulis b3201c402a Add support for OKTA TOTP, fixing #2. 2018-08-31 12:03:33 +00:00
Andris Raugulis fac7013918 Add a way to mark insecure zones. 2018-04-11 12:55:54 +03:00
Andris Raugulis 1856ec11a4 Use generic computer name. 2018-04-09 18:31:10 +03:00
Andris Raugulis 3552df6f14 Mask password input. 2018-04-09 17:38:20 +03:00
Andris Raugulis 49e76bd87f Allow username, password and TOTP to be entered ineractively. 2018-04-09 17:35:07 +03:00
Andris Raugulis 71fdf176dc Implement GlobalProtect + OKTA authentication dance. Support TOTP. 2018-04-09 16:48:45 +03:00
Andris Raugulis 1aa326e4ee Create custom vpnc-script, which handles manual routes and dns via unbound. 2018-04-09 16:46:56 +03:00
Andris Raugulis 80ffcd81cf Ignore file. 2018-04-09 16:40:36 +03:00