0c1905092b
Fix: inconsistent spacing (tabs<->spaces)
2019-06-06 10:05:58 +02:00
3d4ebf719f
Implement double authn login (via stateToken) needed for some corporate VPN setups.
...
The first authn call only returns the `sessionToken`, with the redirect later one gets the `stateToken` and afterwards need to do the authn call again for full authentication (and mfa).
2019-06-06 09:53:52 +02:00
29527325fd
Implement config option cert to use a client certificate.
...
This fixes Issue https://github.com/arthepsy/pan-globalprotect-okta/issues/17 raised by @lvml.
(Note that if you need to specify a client certificate for the `vpn_url`, then most probably
you will also need to give the same certificate to the final `openconnect` call with `--certificate` via the `openconnect_args`)
2019-06-06 09:53:35 +02:00
5f24bc5ec6
Pass prelogin-cookie if portal-userauthcookie is empty
2019-06-04 14:04:32 -04:00
58c1d37f93
Add option for second round of Okta authentication
...
This appears to be required for my VPN
2019-06-04 14:04:32 -04:00
7bcd9eb363
Add Okta transaction state (work around password expiration warning).
2019-02-14 03:40:11 +00:00
2adb621e38
Debug HTTP headers.
2019-01-24 15:50:12 +02:00
281aa34247
Do OKTA redirect dance until it is sucessful.
2019-01-24 15:02:20 +02:00
7528cb8875
Fix relative URLs.
2019-01-24 14:41:16 +02:00
76b2861a7c
Remove whitespace and fix style.
2019-01-24 14:28:22 +02:00
f29ea6f0bb
Reduce code by using common send_req. Refactor get_redirect_url.
2019-01-24 14:18:23 +02:00
d548cad653
Implement SMS verification.
2019-01-22 13:29:04 +00:00
45ef74bca3
Implement MFA selection priority (by mfa_order, by line number, by value).
2019-01-22 13:19:28 +00:00
bc77639d3a
Fix raw_input to be input for py3, set input = raw_input for py2 compat
...
Fixes arthepsy/pan-globalprotect-okta#8
2019-01-10 18:20:09 -05:00
1f8db7d309
Escape backslash in username and other fields, i.e., use single quote.
...
Add work-around for additional username input.
2018-10-08 00:12:59 +00:00
73c88aeb16
Make openconnect_args optional also in code.
2018-09-06 17:09:40 +03:00
4660d48151
Ignore SIGINT to allow proper cleanup on Ctrl-C
2018-09-06 15:12:50 +02:00
9a0ec161de
Let openconnect output go to stdout
2018-09-06 15:12:38 +02:00
36106a879a
Python 3 compatibility.
2018-09-04 18:34:41 +03:00
1520db2cec
Hide cookie in process list (stop using shell=True).
2018-09-04 18:14:39 +03:00
76597ea412
Request username/password if empty. Override configuration file
...
settings with environment variables (GP_*). Implement openconnect
command (for sudo/doas cases) and args (for custom vpnc scripts).
Implement execution.
2018-09-03 15:03:16 +03:00
1df901118d
Add gateway support. Add workaround for newline bug in openconnect.
2018-09-03 13:40:29 +03:00
b3201c402a
Add support for OKTA TOTP, fixing #2 .
2018-08-31 12:03:33 +00:00
2029f19353
Undo my mistake (I botched this in #1 , shame on me)
2018-08-30 17:35:13 -07:00
f7fe9b5529
use openconnect-gp's new mechanism for specifying an alternative-secret field for the login form submission, instead of 'passwd'
...
This was added in the `fun_with_cookie` branch. See:
https://github.com/dlenski/openconnect/commits/fun_with_cookies
https://github.com/dlenski/openconnect/pull/98#issuecomment-380923571
2018-04-13 13:15:16 -07:00
1856ec11a4
Use generic computer name.
2018-04-09 18:31:10 +03:00
3552df6f14
Mask password input.
2018-04-09 17:38:20 +03:00
49e76bd87f
Allow username, password and TOTP to be entered ineractively.
2018-04-09 17:35:07 +03:00
71fdf176dc
Implement GlobalProtect + OKTA authentication dance. Support TOTP.
2018-04-09 16:48:45 +03:00
Tino Lange
Aaron Lindsay
Andris Raugulis
Tyler Christiansen
Johan Ström
Dan Lenski