On Mon, Apr 20, 2020 at 12:28 PM Daniel Lenski <dlen...@gmail.com> wrote: > > On Mon, Apr 20, 2020 at 12:08 PM <wynal...@mailbox.org> wrote: > > > > > > I compared the request sent by the Windows client and openconnect and > > > > they differ quite a bit. Is there a way to add more options to the > > > > request? > > > > > > There are a large number of fields which the Windows client sends, > > > which I'm very confident are vestigial or useless based on testing > > > across many, many GlobalProtect servers. > > > > > > If you want, you can modify the fields sent in the login.esp response > > > here, if you want: > > > https://gitlab.com/openconnect/openconnect/blob/HEAD/auth-globalprotect.c#L566-571 > > > > Is there no easier way to just provide the complete string of parameters > > via command line? If not I can just hack this in by myself. > > You should play around with > https://github.com/dlenski/gp-saml-gui/blob/master/test-globalprotect-login.py. > Run with --help to see all the options, including the ability to > easily specify extra login query parameters. I created it for this > specific purpose, while trying to figure out how GP SAML login works. > > > > If you find that adding additional fields is necessary to make the > > > login works, we'll be extremely interested in that. > > > > I will do.
Did you make any progress figuring this out with test-globalprotect-login.py, or by modifying the OpenConnect source? -Dan _______________________________________________ openconnect-devel mailing list openconnect-devel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/openconnect-devel
