GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → arthepsy → pan-globalprotect-okta

arthepsy / pan-globalprotect-okta

Licence: other
PaloAlto Networks GlobalProtect VPN (integrated with OKTA) command-line client

Programming Languages

python
139335 projects - #7 most used programming language
shell
77523 projects
Dockerfile
14818 projects
Nix
1067 projects

Labels

smsvpntotppaloaltonetworksopenconnectoktaglobalprotectpaloalto

Projects that are alternatives of or similar to pan-globalprotect-okta

openconnect-gui-menu-bar
OpenConnect Menu Bar - Connect/Disconnect/Status - for Mac OS X (supports Duo push/sms/phone, or Yubikey, Google Authenticator, Duo, or any TOTP)
Stars: ✭ 56 (-34.12%)
Mutual labels:  vpn, totp, openconnect
vpns
A collection of vpns
Stars: ✭ 112 (+31.76%)
Mutual labels:  vpn, openconnect
openconnect-installer
Automatically set up an Openconnect/Anyconnect VPN server(ocserv) with Let's Encrypt with just one command in CentOS 8.
Stars: ✭ 64 (-24.71%)
Mutual labels:  vpn, openconnect
pan-cortex-data-lake-python
Python idiomatic SDK for Cortex™ Data Lake.
Stars: ✭ 36 (-57.65%)
Mutual labels:  paloaltonetworks, paloalto
Streisand
Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
Stars: ✭ 22,605 (+26494.12%)
Mutual labels:  vpn, openconnect
Multiotp
multiOTP open source strong two factor authentication PHP library, OATH certified, with TOTP, HOTP, Mobile-OTP, YubiKey, SMS, QRcode provisioning, etc.
Stars: ✭ 173 (+103.53%)
Mutual labels:  sms, totp
multiOTPCredentialProvider
multiOTP Credential Provider is a V2 Credential Provider for Windows 7/8/8.1/10/2012(R2)/2016 with options like RDP only and UPN name support
Stars: ✭ 121 (+42.35%)
Mutual labels:  sms, totp
ucsf-vpn
Linux command-line client to manage a UCSF VPN connection
Stars: ✭ 30 (-64.71%)
Mutual labels:  vpn, openconnect
yii2-notifications
This Yii2 extension provides support for sending notifications across a variety of delivery channels, including mail, SMS, Slack, Telegram etc.
Stars: ✭ 62 (-27.06%)
Mutual labels:  sms
linux-gui-legacy
(Discontinued in favor of official client) GTK3 GUI client with systray, for ProtonVPN. Works on top of linux-cli.
Stars: ✭ 181 (+112.94%)
Mutual labels:  vpn
CovidVaccineNotifier
Get notified with available vaccination centres via SMS
Stars: ✭ 21 (-75.29%)
Mutual labels:  sms
vtun
A simple VPN written in Go.
Stars: ✭ 592 (+596.47%)
Mutual labels:  vpn
ip2proxy-java
IP2Proxy Java Component.It can be used to find the IP addresses which are used as VPN anonymizer, open proxies, web proxies and Tor exits.
Stars: ✭ 16 (-81.18%)
Mutual labels:  vpn
AndroidSMSRelay
Script to forward and send android(with root) sms using adb
Stars: ✭ 21 (-75.29%)
Mutual labels:  sms
kavenegar-dotnet
Kavenegar API Client Writen In C#
Stars: ✭ 24 (-71.76%)
Mutual labels:  sms
okta aws
Tool for accessing the AWS API for an account you normally access via okta
Stars: ✭ 27 (-68.24%)
Mutual labels:  okta
v-switch
Virtual Encrypted Switch across the network, using UDP + AES + TAP
Stars: ✭ 27 (-68.24%)
Mutual labels:  vpn
ootp
OOTP (Open One-time Password) is a supports multiple programming languages. The generated one-time passwords are fully compliant with HOTP (HMAC-based One-time Password) and TOTP (Time-based One-time Password). 🚀It's easy to use!
Stars: ✭ 17 (-80%)
Mutual labels:  totp
edgevpn
⛵ The immutable, decentralized, statically built p2p VPN without any central server and automatic discovery! Create decentralized introspectable tunnels over p2p with shared tokens
Stars: ✭ 223 (+162.35%)
Mutual labels:  vpn
SMSBoom
短信轰炸/短信测压/ | 一个健壮免费的python短信轰炸程序，专门炸坏蛋蛋，百万接口，多线程全自动添加有效接口，支持异步协程百万并发，全免费的短信轰炸工具！！hongkonger开发全网首发！！
Stars: ✭ 10,579 (+12345.88%)
Mutual labels:  sms
View All Similar Projects ➔

pan-globalprotect-okta

Command-line client for PaloAlto Networks' GlobalProtect VPN, integrated with OKTA. This utility will do the authentication dance with OKTA to retrieve cookie, which will be passed to OpenConnect for creating actual VPN connection. Compatible with Python 2 and 3. Tested on FreeBSD, Linux and MacOS X. Tested with OpenConnect 8.00 - 8.10.

It also supports multiple second factor authentication implementations like Google, OKTA, YubiKey, SMS, etc. TOPT authentication can work without user interaction, if initial secret is provided. Otherwise, it will ask for generated code.

To gather TOTP secret, there are two possibilities - either scan the provided QR code with normal QR code scanner and write down the secret. Or create backup from current OTP application in phone. Some applications have this feature, but some don't. For example, andOTP on Android do support this feature.

usage

This utility depends on requests and lxml Python libraries. If TOTP secret is being used, then pyotp is also required. For YubiKey, fido2 is required.

   ./gp-okta.py gp-okta.conf

docker

Build Docker image before running container:

docker build -t gp-okta .

Edit gp-okta.conf and launch Docker container:

sh run-docker.sh

configuration

Configuration file should be self-explanatory. Options can be overridden with GP_ prefixed respective environment variables, e.g., GP_PASSWORD will override password option in configuration file.

changelog

v1.00 (2020-05-xx)

  • new MFA: push, Symantec, WebAuthN/YubiKey
  • GnuGP config encryption
  • direct gateway authentication
  • second authentication dance
  • use client certificates
  • verify server certificates
  • type checking

v0.99 (2019-02-14)

  • supported MFA: OKTA, Google, SMS
  • interactive and hard-coded MFA
  • configurable gateway choice
  • Python2 and Python3 support
  • Dockerfile example
  • workarounds for known issues

known issues

If openconnect returns with ioctl or fgets (stdin): Resource temporarily unavailable error, then this openconnect version requires different openconnect_fmt than detected or manually specified. Run openconnect manually and paste line-by-line required options to figure out required openconnect_fmt. Also, please, open an issue and report it.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].