Can't connect to Juniper VPN when a 'Post Sign-In Message' is set

Katelyn Schiesser katelyn.schiesser at gmail.com
Tue Jun 14 16:16:27 PDT 2016


Okay, I got it working. I didn't add any sort of interactive-ness, as
I felt that would break the flow of things - especially if someone
used -b/--background. Openconnect just assumes you want to press
'Proceed'. I also made it print whatever the Post Sign-in Message is
set to.

 Here is my patch - let me know if you want anything changed in it.

Signed-off-by: Katelyn Schiesser <katelyn.schiesser at gmail.com>

On Tue, Jun 14, 2016 at 1:55 PM, Katelyn Schiesser
<katelyn.schiesser at gmail.com> wrote:
> Here's the output of that, stripped of user/pass/etc:
> http://www.slowbro.org/openconnect_juniper_dump.txt
>
> Note the..
>
>> Ignoring unknown form submit item 'sn-postauth-proceed'
>> Ignoring unknown form submit item 'sn-postauth-decline'
>
> I'm going to take a look at auth-juniper.c and see if I can get it workin'
>
>
> Katelyn
>
> On Tue, Jun 14, 2016 at 12:09 AM, David Woodhouse <dwmw2 at infradead.org> wrote:
>> On Mon, 2016-06-13 at 21:39 -0700, Katelyn Schiesser wrote:
>>>
>>> I have been using openconnect to get on work's Juniper Pulse VPN for a
>>> while, Recently, they changed things so that when we log in we are
>>> greeted with a proceed/decline check and a message.
>>>
>>> This causes openconnect to tell me 'Failed to obtain WebVPN cookie' -
>>> full log below.
>>>
>>> Is there anything I can do to get around this?
>>
>> Repeat the debug log with --dump-http-traffic.
>>
>> Implement yet another special case in our horribly hackish HTML form
>> parsing code in auth-juniper, to 'extract' the interesting fields from
>> the new page that you're seeing.
>>
>> Lament the fact that we really want a generic HTML renderer — the
>> NetworkManager GUIs can use WebKit, and I'm not sure how to do text
>> mode... maybe elinks can help?
>>
>> --
>> dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-support-for-Juniper-s-Post-Sign-in-Message.patch
Type: text/x-patch
Size: 2267 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20160614/55bb892a/attachment.bin>


More information about the openconnect-devel mailing list