On Wed, Mar 19, 2025 at 09:14:07PM -0600, Thomas Danhorn wrote:
> Hi guys,
>
> Thank you for making a great tool. I have been using it in conjunction with
> the NetworkManager plugin to connect to a Palo Alto Global Protect VPN for
> the last couple of years, and it worked great. For the last few months I
> have been using it with a YubiKey. Recently, it suddenly stopped working
> (512 server error after successful authentication), however, and through
> trying different gl-saml-gui version, I am pretty sure that the problem is
> that the SAML and cookie from the server response are now only in the
> comment inside the HTML page, and no longer in its header.
Hi Thomas,
Have you tried adding '/portal:prelogin-cookie' to the 'Gateway' URL as
suggested in:
https://gitlab.gnome.org/GNOME/NetworkManager-openconnect/-/issues/130#note_2367443
Regards,
Wade
> If I read the commit messages correctly, that seems to have been fixed 18
> months ago (in commit 8c5d65889b), but there has been no new version tag
> since 9.12 a few months earlier. Since Linux distros and packaging services
> (e.g. openSUSE build service) go by the tags (since they signal a stable
> version), there is no newer package than 9.12 available, and that does not
> have the fix for the SAML-in-comment problem.
>
> While I could probably compile the newest version from GitLab, it is
> obviously easier to use a package, and I am not the only one with this
> problem. I would therefore really appreciate it, if you could release 9.13
> in the not-to-distant future. I'm getting by with gp-saml-gui, but it is
> not as well integrated with NetworkManager and I don't have the options that
> come with that, like routing only certain addresses through the VPN, so I'm
> looking forward to the next version of opemconnect.
>
> Thank you very much!
>
> Thomas
>
> _______________________________________________
> openconnect-devel mailing list
> openconnect-devel@lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/openconnect-devel
_______________________________________________
openconnect-devel mailing list
openconnect-devel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/openconnect-devel
