Re: [OATH-Toolkit-help] openconnect with safenet token

[David Woodhouse]

On Wed, 2014-07-09 at 11:49 -0700, Kevin Cernekee wrote:
> On Wed, Jul 9, 2014 at 11:38 AM, DeadManMoving <address@hidden> wrote:
> > Under windows, when using cisco anyconnect and the above software from
> > safenet, when i connect to the VPN, anyconnect is prompting me for my
> > username and the passcode (PIN+token) so, i generate a token with the
> > safenet software then i enter my PIN+token given to me by the software.
> 
> Currently the TOTP/HOTP code tries to fill in the secondary_password
> field on the auth form.  Maybe this is not the right behavior for the
> server you're using?  Can you post the server name and/or
> --dump-http-traffic logs?

Did you sort this out?

I have HOTP tokens from a file working correctly now. You put the token
in the file in the same form we want it on the command line
("secret,counter"), and it'll update that file.

It also works with NetworkManager-openconnect, updating the secret in
the NM secret storage each time a token is generated.

I've almost got PSKC support too, except for a libpskc bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1129491

-- 
dwmw2

smime.p7s
Description: S/MIME cryptographic signature