Hi guys,

Thank you for making a great tool. I have been using it in conjunction with the NetworkManager plugin to connect to a Palo Alto Global Protect VPN for the last couple of years, and it worked great. For the last few months I have been using it with a YubiKey. Recently, it suddenly stopped working (512 server error after successful authentication), however, and through trying different gl-saml-gui version, I am pretty sure that the problem is that the SAML and cookie from the server response are now only in the comment inside the HTML page, and no longer in its header.

If I read the commit messages correctly, that seems to have been fixed 18 months ago (in commit 8c5d65889b), but there has been no new version tag since 9.12 a few months earlier. Since Linux distros and packaging services (e.g. openSUSE build service) go by the tags (since they signal a stable version), there is no newer package than 9.12 available, and that does not have the fix for the SAML-in-comment problem.

While I could probably compile the newest version from GitLab, it is obviously easier to use a package, and I am not the only one with this problem. I would therefore really appreciate it, if you could release 9.13 in the not-to-distant future. I'm getting by with gp-saml-gui, but it is not as well integrated with NetworkManager and I don't have the options that come with that, like routing only certain addresses through the VPN, so I'm looking forward to the next version of opemconnect.

Thank you very much!

Thomas

_______________________________________________
openconnect-devel mailing list
openconnect-devel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/openconnect-devel

Reply via email to