Failed to obtain WebVPN cookie

Daniel Lenski dlenski at gmail.com
Tue Jan 24 16:29:46 PST 2017


On Tue, Jan 24, 2017 at 1:53 PM, Dustin Hartung
<dustin.hartung at gmail.com> wrote:
> the ncsvc switch didnt seem to do anything different....  In terms of
> the DSID cookie - i am exactly sure how to generate it.  We use the
> junos client on Macs/iPhones and the Network Connect client in
> windows.

When you're using Network Connect client on Windows, this is exactly
what it's sending: "User-Agent: ncsvc"

> We dont necessarily login from a browser.  If i do try to
> hit that page from a web browser it shows loading components *Host
> Checker"  and if i view the cookies i see the following:
>
> opentoken
> DSSigninURL
> DSSIGNIN
> DSPREAUTH
> DSLAUNCHURL
> DSHCSTARTED

The good news is that you have confirmed that your VPN does indeed use
the Host Checker, so you'll want to continue your debugging down that
route.

The bad news is that your VPN actually uses the Host Checker :-(

I don't have access to a Juniper VPN with Host Checker currently, so I
can't help you with this one any further.

-Dan



More information about the openconnect-devel mailing list