Inicio Explorar Axuda
Iniciar sesión
noah
/
openconnect-ms-auth
1
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki

authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client

Árbore: 584ebba8d7
Ramas Etiquetas
openconnect-ms-...
ZIP TAR.GZ
Sean 584ebba8d7 Update black, add pre-commit & pydocstyle %!s(int64=3) %!d(string=hai) anos
.vscode f34f4fc42f Initial commit %!s(int64=4) %!d(string=hai) anos
ocma e12614372d Check form input status, close #1 %!s(int64=4) %!d(string=hai) anos
tests f34f4fc42f Initial commit %!s(int64=4) %!d(string=hai) anos
.drone.yml 627a22a6f9 Circumvent local drone naming & update to new spec %!s(int64=3) %!d(string=hai) anos
.gitignore f34f4fc42f Initial commit %!s(int64=4) %!d(string=hai) anos
.mypy.ini f34f4fc42f Initial commit %!s(int64=4) %!d(string=hai) anos
.pre-commit-config.yaml f8b8af7618 Add pylint to pre-commit, fix pytest %!s(int64=3) %!d(string=hai) anos
Dockerfile 78d8cc1ec4 Update poetry in docker file %!s(int64=3) %!d(string=hai) anos
license.md 491d8b6ade Add license %!s(int64=4) %!d(string=hai) anos
poetry.lock 584ebba8d7 Update black, add pre-commit & pydocstyle %!s(int64=3) %!d(string=hai) anos
pyproject.toml 584ebba8d7 Update black, add pre-commit & pydocstyle %!s(int64=3) %!d(string=hai) anos
readme.md 1fb95c6f41 Add upgrade instruction %!s(int64=4) %!d(string=hai) anos

readme.md

Openconnect MS-Auth

This package allows you to authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client.

It uses selenium to open the login webpage and fill in the form details. At the end, it fetches the correct VPN HOST and the Cisco AnyConnect webvpn cookie.

Installation for CLI usage

Simply run pip install --upgrade git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth to install the package globally. Then the "ocma" command should be available. Try it out by typing ocma -h.

Example CLI usage

Replace [username] and [password] with your own information. If you have your account secured with a TOTP MFA, provide the -m flag with the TOTP secret as the value.

Example of a TOTP url: otpauth://totp/FHNW%3Aelon.musk%40students.fhnw.ch?secret=NBSWY3DPEB3W64TMMQ&issuer=Microsoft The secret in this case would be NBSWY3DPEB3W64TMMQ. This needs to be provided as an input.

eval $( ocma -u [username] -p [password] -m [mfa_secret] --print-to-stdout );
[ -n $VPN_COOKIE ] && echo $VPN_COOKIE | sudo openconnect --cookie-on-stdin $VPN_HOST

Example usage in a Python project

Add with poetry: poetry add git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth

from ocma import connect

connect.login(
    username="username",
    password="password",
    mfa_secret="mfa_secret"
)