mirror of
https://github.com/os-mnemo/pan-globalprotect-okta
synced 2026-07-31 07:44:38 +02:00
Andris Raugulis
679018c6f9
- auto-detect openconnect version and required stdin pipe format - support manual format specification (for future openconnect bugs) - remove "bug.*" configuration options as they are unnecessary now
39 lines
1.3 KiB
Plaintext
39 lines
1.3 KiB
Plaintext
debug = 0
|
|
|
|
vpn_url = https://vpn.example.com
|
|
#vpn_url_cert = vpn_url.cert
|
|
|
|
okta_url = https://example.okta.com
|
|
#okta_url_cert = okta_url.cert
|
|
|
|
#gateway = NEWYORK1-GW # optional gateway name to choose
|
|
#gateway_url = https://ny1-gw.my.lan # optional gateway url to authenticate
|
|
another_dance = 0 # second round of authentication
|
|
|
|
username = myuser
|
|
password = mypass
|
|
#client_cert = path-to-myusers-client-cert-as-unencrypted-pem-file.pem
|
|
|
|
#openconnect_certs = path-to-a-writeable-filename-in-which-the-script-will-collect-all-involved-server-certs-if-not-set-a-temp-file-is-used-instead
|
|
|
|
# mfa_order = totp sms
|
|
sms.okta = 0
|
|
#totp.okta = ABCDEFGHIJKLMNOP
|
|
#totp.google = ABCDEFGHIJKLMNOP
|
|
#totp.symantec = ABCDEFGHIJKLMNOP
|
|
|
|
execute = 0 # execute openconnect command
|
|
openconnect_cmd = sudo openconnect # command to run openconnect
|
|
openconnect_args = # optional arguments to openconnect
|
|
|
|
# "openconnect_fmt" is automatically detected by running "openconnect_cmd" -V
|
|
# otherwise, it can be manually formatted what exactly pipe to openconect:
|
|
# - supports <cookie>, <gateway_name>, etc
|
|
# - other characters are provided as-is
|
|
#
|
|
# - for openconnect 8.05+
|
|
#openconnect_fmt = <cookie><gateway_name><cookie>
|
|
# - for openconnect 8.00 - 8.04
|
|
#openconnect_fmt = <cookie><gateway_name>
|
|
|