Etusivu Tutki Apua
Kirjaudu sisään
noah
/
openconnect-ms-auth
1
0
Haarauta 0
Tiedostot Esitykset 0 Vetopyynnöt 0 Wiki

authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client

Puu: b33e59dfdc
Haarat Tunnisteet
openconnect-ms-...
ZIP TAR.GZ
Sean b33e59dfdc Read password from stdin if not provided as an input 4 vuotta sitten
.vscode f34f4fc42f Initial commit 4 vuotta sitten
ocma b33e59dfdc Read password from stdin if not provided as an input 4 vuotta sitten
tests f34f4fc42f Initial commit 4 vuotta sitten
.drone.yml f34f4fc42f Initial commit 4 vuotta sitten
.gitignore f34f4fc42f Initial commit 4 vuotta sitten
.mypy.ini f34f4fc42f Initial commit 4 vuotta sitten
.pre-commit-config.yaml f34f4fc42f Initial commit 4 vuotta sitten
Dockerfile f34f4fc42f Initial commit 4 vuotta sitten
poetry.lock f34f4fc42f Initial commit 4 vuotta sitten
pyproject.toml b33e59dfdc Read password from stdin if not provided as an input 4 vuotta sitten
readme.md 362a91a34a Add instructions for using the package 4 vuotta sitten

readme.md

Openconnect MS-Auth

This package allows you to authenticate with your MFA enabled Microsoft-Account into the openconnect VPN client.

It uses selenium to open the login webpage and fill in the form details. At the end, it fetches the correct VPN HOST and the Cisco AnyConnect webvpn cookie.

Installation for CLI usage

Simply run pip install git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth to install the package globally. Then the "ocma" command should be available. Try it out by typing ocma -h.

Example CLI usage

Replace [username] and [password] with your own information. If you have your account secured with a TOTP MFA, provide the -m flag with the TOTP secret as the value.

Example of a TOTP url: otpauth://totp/FHNW%3Aelon.musk%40students.fhnw.ch?secret=NBSWY3DPEB3W64TMMQ&issuer=Microsoft The secret in this case would be NBSWY3DPEB3W64TMMQ. This needs to be provided as an input.

eval $( ocma -u [username] -p [password] -m [mfa_secret] --print-to-stdout );
[ -n $VPN_COOKIE ] && echo $VPN_COOKIE | sudo openconnect --cookie-on-stdin $VPN_HOST

Example usage in a Python project

Add with poetry: poetry add git+https://git.snas.black-burn.ch/FHNW/openconnect-ms-auth

from ocma import connect

connect.login(
    username="username",
    password="password",
    mfa_secret="mfa_secret"
)