da0638fd12
Add short arguments. Reorder imports. Shorten main().
2020-05-26 11:25:00 +00:00
1074961df9
Update readme.
2020-05-26 05:35:24 +03:00
31f986718d
Upgrade Dockerfile (anybody using it?).
2020-05-26 02:25:27 +00:00
18b0ea085f
Some pylint fixes.
2020-05-26 02:08:21 +00:00
d801a6e91e
Refactor portal/gateway authentication to be more clear for code reader.
...
While there, fix some issues, regarding choosing either portal or gateway.
2020-05-26 01:49:21 +00:00
246ea3a8d3
Pass gateway in command-line, not in stdin.
2020-05-25 22:40:02 +00:00
f91eb3843a
Fix temporary certificate file removal, mentioned in #21 .
2020-05-25 22:28:55 +00:00
f0a3c8ec2c
Rework certificate verification.
2020-05-25 22:24:49 +00:00
b53657b767
Do not use client certificate, if not specified.
2020-05-25 19:52:18 +00:00
15d03e2ca2
Fix usage of client certificates, as noted in #21 .
2020-05-25 18:04:52 +00:00
b977409ae0
Write bytes, not str.
2020-05-23 01:19:57 +00:00
bc46b987d6
Rename example URLs.
2020-05-23 01:16:43 +00:00
69ebe59400
Add flush().
2020-05-23 01:13:21 +00:00
9eea095bda
Rework certificate parts. Use different client certificates.
...
Reshape and reword configuration file.
2020-05-23 01:06:52 +00:00
3e6b63285c
Ignore ".mypy_cache" directory.
2020-05-22 22:47:08 +00:00
28ad0ddbe5
Finish up MyPy type checking. While there, refactor a bit.
2020-05-22 22:45:24 +00:00
d5d83bb009
Add simple MyPy typing. All good, except file handle in conf.
2020-05-21 23:14:57 +00:00
2938e4d8dc
Prospector fixes.
2020-05-21 19:50:21 +00:00
518ce1ba67
Fix link in readme.
2020-05-21 18:58:48 +00:00
d1c5040b9d
Update readme.
2020-05-21 18:57:52 +00:00
f70bca8245
Update know issues section.
2020-05-21 18:34:52 +00:00
5845d335bf
Update know issues section.
2020-05-21 18:33:36 +00:00
782f71cfb2
Python3 fixes.
2020-05-21 18:27:13 +00:00
679018c6f9
Fix OpenConnect 8.05+ compatibility by implementing new feature:
...
- auto-detect openconnect version and required stdin pipe format
- support manual format specification (for future openconnect bugs)
- remove "bug.*" configuration options as they are unnecessary now
2020-05-21 18:21:22 +00:00
b5dffd6ab2
Do not error out, when OKTA redirects to unknown (nearest) "gateway" portal.
2020-05-21 16:32:34 +00:00
011dc55493
Add more debugging.
2020-05-21 16:14:03 +00:00
0857d9d5ee
Merge pull request #20 from siers/master
...
shell.nix for NixOS
2020-05-21 17:28:35 +03:00
2a1fb948fc
Use gateway as choice in openconnect and gateway_url as direct authentication URL.
...
Rename `--show-list-of-gateways` to `--list-gateways` and fix it (sometimes gateways can be listed only after authentication).
Reorder configuration file to be more sane.
2020-05-21 14:21:54 +00:00
ba14b46d7d
Merge pull request #19 from coldcoff/master
...
Several improvements for `gp-okta.py`
2020-05-21 13:18:32 +03:00
a808b2486d
Add ChangeLog.
2020-05-21 09:36:31 +00:00
7fbaeee604
support 'push' also in mfa_priority
2020-05-08 09:35:06 +02:00
d9c3b2198c
merge PR https://github.com/arthepsy/pan-globalprotect-okta/pull/14 from @sirmax
2020-05-08 09:17:18 +02:00
0aa34dc547
fix 'gateway used before assignement' error (code review by @cardonator)
2020-05-08 08:56:36 +02:00
27f1538188
shell.nix for NixOS
2020-04-24 14:45:55 +03:00
a4db9833a1
remove strange hex chars in docstring (probably an artifact from copy&paste)
2020-04-16 16:04:25 +02:00
7d478c0e34
Implement '--show-list-of-gateways' option to display the list of gateways fetched from the portal - useful to see what values the 'gateway' option can take
2020-04-16 09:48:19 +02:00
3946d55e59
Add some good ideas from @limitz404
2020-04-15 12:27:09 +02:00
748749e78f
trim trailing whitespace
2020-04-14 11:53:46 +02:00
fa5e58f333
allow to dance only with some concrete gateway when SAML is disabled at the portal (but not at the gateway)
2020-04-14 11:52:42 +02:00
8f628a9f78
make the error message more verbose in case a SAML request is missing in the response
2020-04-14 11:51:47 +02:00
76a895d3ff
Merge pull request #2 from dlenski/Symantec_VIPAccess_is_TOTP
...
Treat "Symantec VIP Access" as TOTP
2020-01-30 08:57:53 +01:00
fce587af61
Treat "Symantec VIP Access" as TOTP
...
Although not advertised as such, Symantec VIP Access is based on TOTP and
there is an open-source implementation for provisioning the tokens and
obtaining the TOTP secret at http://github.com/dlenski/python-vipaccess
2019-09-16 12:23:20 -07:00
c9944a15c8
No functional changes, just document (commented out) more potential parameters for getconfig.esp (found in OpenConnect source code and docs)
2019-09-03 10:31:48 +02:00
536a88f487
Bugfix: formatting of error message when send_req() fails
2019-09-03 10:30:21 +02:00
c4e7498f4d
Feature: Allow Yubikey webauthn authentication, if configured as 2FA in Okta.
...
Just insert your YubiKey and press the blinking button, when asked to do so.
Needs `fido2` packages to work (`pip install fido2`).
2019-07-07 19:06:59 +02:00
f0c785f19c
Bugfix: use unicode literals also on python2, this avoids errors with formatstring.format(...)
...
(see: https://stackoverflow.com/questions/3235386/python-using-format-on-a-unicode-escaped-string )
2019-07-04 00:02:18 +02:00
54145a7545
Bugfix: guard case when error msg is not returned
2019-07-03 23:46:50 +02:00
9ee875bf56
Some portals seem not to return root-ca entries, detect that and just continue
2019-06-14 12:58:30 +02:00
ceeaebba6d
Do the "another_dance" at the desired gateway to obtain a cookie that is valid there
2019-06-13 17:17:58 +02:00
d6a3863774
Add the committing people all to the copyright notice
2019-06-13 17:10:52 +02:00
Andris Raugulis
Andris Raugulis
Tino Lange
siers
coldcoff
Daniel Lenski