os-mnemo/pan-globalprotect-okta
1
0
Fork 0
mirror of https://github.com/os-mnemo/pan-globalprotect-okta synced 2026-07-31 07:44:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • da771a46c6 Implement different auth route (enabled FastPass). master Andris Raugulis 2022-08-03 10:32:26 +00:00
  • a0b2ba6da7 Handle case without MFA. Andris Raugulis 2022-07-08 12:09:16 +00:00
  • 65ddf4aac2 Implement Okta Identity Engine APIs (enabled by default). Andris Raugulis 2022-07-08 09:08:33 +00:00
  • 4ced12b5f5 Better regex. Andris Raugulis 2022-07-08 09:03:11 +00:00
  • 526a59dfae Merge pull request #34 from agriic/master Andris Raugulis 2022-07-08 11:53:21 +03:00
  • 7128b2996f Fixes okta authentification Agris Dumins 2022-03-30 09:55:11 +03:00
  • f88beb9d07 Provide other MFA in config. Fixes #22. Andris Raugulis 2020-05-26 19:12:24 +00:00
  • b637ea9028 Debug option should not be exposed by default in config. Andris Raugulis 2020-05-26 14:52:56 +00:00
  • 71e7944cc3 Refactor config file reading (also with GnuGP). Andris Raugulis 2020-05-26 12:36:36 +00:00
  • bea8cc8825 Fix some pylint reported issues. Andris Raugulis 2020-05-26 11:56:57 +00:00
  • da0638fd12 Add short arguments. Reorder imports. Shorten main(). Andris Raugulis 2020-05-26 11:25:00 +00:00
  • 1074961df9 Update readme. Andris Raugulis 2020-05-26 05:35:24 +03:00
  • 31f986718d Upgrade Dockerfile (anybody using it?). Andris Raugulis 2020-05-26 02:25:27 +00:00
  • 18b0ea085f Some pylint fixes. Andris Raugulis 2020-05-26 02:08:21 +00:00
  • d801a6e91e Refactor portal/gateway authentication to be more clear for code reader. While there, fix some issues, regarding choosing either portal or gateway. Andris Raugulis 2020-05-26 01:49:21 +00:00
  • 246ea3a8d3 Pass gateway in command-line, not in stdin. Andris Raugulis 2020-05-25 22:40:02 +00:00
  • f91eb3843a Fix temporary certificate file removal, mentioned in #21. Andris Raugulis 2020-05-25 22:28:55 +00:00
  • f0a3c8ec2c Rework certificate verification. Andris Raugulis 2020-05-25 22:24:49 +00:00
  • b53657b767 Do not use client certificate, if not specified. Andris Raugulis 2020-05-25 19:52:18 +00:00
  • 15d03e2ca2 Fix usage of client certificates, as noted in #21. Andris Raugulis 2020-05-25 18:04:52 +00:00
  • b977409ae0 Write bytes, not str. Andris Raugulis 2020-05-23 01:19:57 +00:00
  • bc46b987d6 Rename example URLs. Andris Raugulis 2020-05-23 01:16:43 +00:00
  • 69ebe59400 Add flush(). Andris Raugulis 2020-05-23 01:13:21 +00:00
  • 9eea095bda Rework certificate parts. Use different client certificates. Reshape and reword configuration file. Andris Raugulis 2020-05-23 01:06:52 +00:00
  • 3e6b63285c Ignore ".mypy_cache" directory. Andris Raugulis 2020-05-22 22:47:08 +00:00
  • 28ad0ddbe5 Finish up MyPy type checking. While there, refactor a bit. Andris Raugulis 2020-05-22 22:45:24 +00:00
  • d5d83bb009 Add simple MyPy typing. All good, except file handle in conf. Andris Raugulis 2020-05-21 23:14:57 +00:00
  • 2938e4d8dc Prospector fixes. Andris Raugulis 2020-05-21 19:50:21 +00:00
  • 518ce1ba67 Fix link in readme. Andris Raugulis 2020-05-21 18:58:48 +00:00
  • d1c5040b9d Update readme. Andris Raugulis 2020-05-21 18:57:52 +00:00
  • f70bca8245 Update know issues section. Andris Raugulis 2020-05-21 18:34:52 +00:00
  • 5845d335bf Update know issues section. Andris Raugulis 2020-05-21 18:33:36 +00:00
  • 782f71cfb2 Python3 fixes. Andris Raugulis 2020-05-21 18:27:13 +00:00
  • 679018c6f9 Fix OpenConnect 8.05+ compatibility by implementing new feature: - auto-detect openconnect version and required stdin pipe format - support manual format specification (for future openconnect bugs) - remove "bug.*" configuration options as they are unnecessary now Andris Raugulis 2020-05-21 18:21:22 +00:00
  • b5dffd6ab2 Do not error out, when OKTA redirects to unknown (nearest) "gateway" portal. Andris Raugulis 2020-05-21 16:32:34 +00:00
  • 011dc55493 Add more debugging. Andris Raugulis 2020-05-21 16:14:03 +00:00
  • 0857d9d5ee Merge pull request #20 from siers/master Andris Raugulis 2020-05-21 17:28:35 +03:00
  • 2a1fb948fc Use gateway as choice in openconnect and gateway_url as direct authentication URL. Rename --show-list-of-gateways to --list-gateways and fix it (sometimes gateways can be listed only after authentication). Reorder configuration file to be more sane. Andris Raugulis 2020-05-21 14:21:54 +00:00
  • ba14b46d7d Merge pull request #19 from coldcoff/master Andris Raugulis 2020-05-21 13:18:32 +03:00
  • a808b2486d Add ChangeLog. Andris Raugulis 2020-05-21 09:36:31 +00:00
  • 7fbaeee604 support 'push' also in mfa_priority Tino Lange 2020-05-08 09:35:06 +02:00
  • d9c3b2198c merge PR https://github.com/arthepsy/pan-globalprotect-okta/pull/14 from @sirmax Tino Lange 2020-05-08 09:17:18 +02:00
  • 0aa34dc547 fix 'gateway used before assignement' error (code review by @cardonator) Tino Lange 2020-05-08 08:56:36 +02:00
  • 27f1538188 shell.nix for NixOS siers 2020-04-24 14:45:45 +03:00
  • a4db9833a1 remove strange hex chars in docstring (probably an artifact from copy&paste) Tino Lange 2020-04-16 16:04:25 +02:00
  • 7d478c0e34 Implement '--show-list-of-gateways' option to display the list of gateways fetched from the portal - useful to see what values the 'gateway' option can take Tino Lange 2020-04-16 09:48:19 +02:00
  • 3946d55e59 Add some good ideas from @limitz404 Tino Lange 2020-04-15 12:27:09 +02:00
  • 748749e78f trim trailing whitespace Tino Lange 2020-04-14 11:53:46 +02:00
  • fa5e58f333 allow to dance only with some concrete gateway when SAML is disabled at the portal (but not at the gateway) Tino Lange 2020-04-14 11:52:42 +02:00
  • 8f628a9f78 make the error message more verbose in case a SAML request is missing in the response Tino Lange 2020-04-14 11:51:47 +02:00
  • 76a895d3ff Merge pull request #2 from dlenski/Symantec_VIPAccess_is_TOTP coldcoff 2020-01-30 08:57:53 +01:00
  • fce587af61 Treat "Symantec VIP Access" as TOTP Daniel Lenski 2019-05-30 16:12:20 -07:00
  • c9944a15c8 No functional changes, just document (commented out) more potential parameters for getconfig.esp (found in OpenConnect source code and docs) Tino Lange 2019-09-03 10:31:48 +02:00
  • 536a88f487 Bugfix: formatting of error message when send_req() fails Tino Lange 2019-09-03 10:30:21 +02:00
  • c4e7498f4d Feature: Allow Yubikey webauthn authentication, if configured as 2FA in Okta. Just insert your YubiKey and press the blinking button, when asked to do so. Needs fido2 packages to work (pip install fido2). Tino Lange 2019-07-07 19:06:59 +02:00
  • f0c785f19c Bugfix: use unicode literals also on python2, this avoids errors with formatstring.format(...) (see: https://stackoverflow.com/questions/3235386/python-using-format-on-a-unicode-escaped-string) Tino Lange 2019-07-04 00:02:18 +02:00
  • 54145a7545 Bugfix: guard case when error msg is not returned Tino Lange 2019-07-03 23:46:50 +02:00
  • 9ee875bf56 Some portals seem not to return root-ca entries, detect that and just continue Tino Lange 2019-06-14 12:58:30 +02:00
  • ceeaebba6d Do the "another_dance" at the desired gateway to obtain a cookie that is valid there Tino Lange 2019-06-13 17:17:58 +02:00
  • d6a3863774 Add the committing people all to the copyright notice Tino Lange 2019-06-13 17:10:52 +02:00
  • 59af2acf8e Shorten imports Tino Lange 2019-06-13 17:09:53 +02:00
  • 92a167d00e Use stderr for error messages. Tino Lange 2019-06-13 16:59:18 +02:00
  • d14109df28 do not close file, flush is enough for now - otherwise it might get deleted in case of the temp file solution Tino Lange 2019-06-12 12:53:55 +02:00
  • 15c5734878 - flush openconnect_certs file in between and finally close before giving to openconnect call Tino Lange 2019-06-12 11:06:44 +02:00
  • 412560eff7 - Add ssl cert verification for vpn and okta side, if configured - new option vpn_url_cert - new option okta_url_cert - rename client certificate option to client_cert from cert - totp: comment out ABCDEFGHIJKLMNOP secrets, default to not set (so you get asked) - grab and display prelogin errors (for example: client certificate needed or such) - new option openconnect_certs that points to a file to collect all given and collected server certificates, will be given to the final openconnect call (inspired by nicklans fork, thank you). If it is not set it will be a temp file. - check all redirect and parsed urls if they point to an expected domain (either okta_url or vpn_url) - learn gateway from getconfig call, if not set/overridden by config file Tino Lange 2019-06-11 14:31:23 +02:00
  • fab69fe18c Set certificate automatically also in openconnect call, if one is set in gp-okta.conf for the requests-dance Tino Lange 2019-06-07 09:37:21 +02:00
  • 0c1905092b Fix: inconsistent spacing (tabs<->spaces) Tino Lange 2019-06-06 10:05:58 +02:00
  • 3d4ebf719f Implement double authn login (via stateToken) needed for some corporate VPN setups. The first authn call only returns the sessionToken, with the redirect later one gets the stateToken and afterwards need to do the authn call again for full authentication (and mfa). Tino Lange 2019-06-04 09:40:29 +02:00
  • 29527325fd Implement config option cert to use a client certificate. Tino Lange 2019-06-04 09:21:36 +02:00
  • 5f24bc5ec6 Pass prelogin-cookie if portal-userauthcookie is empty Aaron Lindsay 2018-09-11 09:14:51 -04:00
  • 58c1d37f93 Add option for second round of Okta authentication Aaron Lindsay 2018-09-10 15:02:06 -04:00
  • 7bcd9eb363 Add Okta transaction state (work around password expiration warning). Andris Raugulis 2019-02-14 03:40:11 +00:00
  • 2adb621e38 Debug HTTP headers. Andris Raugulis 2019-01-24 15:50:12 +02:00
  • 281aa34247 Do OKTA redirect dance until it is sucessful. Andris Raugulis 2019-01-24 15:02:20 +02:00
  • 7528cb8875 Fix relative URLs. Andris Raugulis 2019-01-24 14:41:16 +02:00
  • 76b2861a7c Remove whitespace and fix style. Andris Raugulis 2019-01-24 14:28:22 +02:00
  • f29ea6f0bb Reduce code by using common send_req. Refactor get_redirect_url. Andris Raugulis 2019-01-24 14:18:23 +02:00
  • d548cad653 Implement SMS verification. Andris Raugulis 2019-01-22 13:29:04 +00:00
  • 45ef74bca3 Implement MFA selection priority (by mfa_order, by line number, by value). Andris Raugulis 2019-01-22 13:19:28 +00:00
  • c2e6663a60 Merge pull request #9 from supertylerc/fix-8/raw-input Andris Raugulis 2019-01-22 13:37:30 +02:00
  • bc77639d3a Fix raw_input to be input for py3, set input = raw_input for py2 compat Tyler Christiansen 2019-01-10 18:20:09 -05:00
  • 1f8db7d309 Escape backslash in username and other fields, i.e., use single quote. Add work-around for additional username input. Andris Raugulis 2018-10-08 00:12:59 +00:00
  • 263bd98b41 Fix typo in Dockerfile. Andris Raugulis 2018-09-07 01:06:19 +03:00
  • 73c88aeb16 Make openconnect_args optional also in code. Andris Raugulis 2018-09-06 17:09:40 +03:00
  • d397a4cc20 Merge pull request #5 from stromnet/cleanup-fix Andris Raugulis 2018-09-06 17:07:14 +03:00
  • 4660d48151 Ignore SIGINT to allow proper cleanup on Ctrl-C Johan Ström 2018-09-06 15:12:50 +02:00
  • 9a0ec161de Let openconnect output go to stdout Johan Ström 2018-09-06 15:12:38 +02:00
  • c445c828e9 Mention Python compatiblity. Andris Raugulis 2018-09-04 18:37:19 +03:00
  • 36106a879a Python 3 compatibility. Andris Raugulis 2018-09-04 18:34:41 +03:00
  • 1520db2cec Hide cookie in process list (stop using shell=True). Andris Raugulis 2018-09-04 18:14:39 +03:00
  • ac0066adad Add supported OS'es. Andris Raugulis 2018-09-04 17:10:36 +03:00
  • 9d8f69e895 Fix pulled Dockerfile. Andris Raugulis 2018-09-04 16:35:46 +03:00
  • 7e09f5771f Fix shebang and rename container and script. Andris Raugulis 2018-09-04 15:45:55 +03:00
  • 2c222deccb introduce docker and launch script (#4) Aivars Sterns 2018-09-04 15:35:14 +03:00
  • a050e961a8 Fix mistake in option naming. Andris Raugulis 2018-09-03 19:05:13 +03:00
  • 11a7d1b9cb Make note about dependencies. Andris Raugulis 2018-09-03 18:54:39 +03:00
  • 6bff117654 Fix typo in option name. Andris Raugulis 2018-09-03 18:46:37 +03:00
  • dafd415029 Rework readme. Andris Raugulis 2018-09-03 18:44:42 +03:00
  • f677133a32 Add initial readme. Andris Raugulis 2018-09-03 18:39:38 +03:00
  • 51b8725260 Do not force sudo in default configuration. Andris Raugulis 2018-09-03 15:05:35 +03:00