search

AaltoSciComp / scicomp-docs

Aalto scientific computing guide: former Triton user guide + more info
https://scicomp.aalto.fi
Other
30 stars 47 forks source link

update instructions for openconnect #695

Closed arashbm closed 2 months ago

arashbm commented 4 months ago

Cisco VPN now requires User Agent to contain the word AnyConnect to work.

https://scicomp.zulip.cs.aalto.fi/#narrow/stream/4-general/topic/VPN.20connection.20problem/near/276672

tpfau commented 4 months ago

When I try to do this, I don't get to the SSO handler, which would be needed to log in. How do you set up the SSO handler for openconnect?

arashbm commented 4 months ago

On Ubuntu 23.10 package network-manager-openconnect-gnome has a dependency on libwebkit2gtk-4.0-37 and just opens up a webkit when connecting to the VPN. Seems like invoking from CLI has a known issue though. Should I just remove mentions to the CLI?

tpfau commented 4 months ago

I think the problem is in exactly this package. Ubuntu 22.04 network-manager-openconnect-gnome is still at version 1.2.6-4, which (I think) does not have the fix setting AnyConnect as client ID for cisco vpn servers, and thus fails... I'm currently waiting for April to upgrade and use the next lts which hopefully has solved this.

arashbm commented 4 months ago

At least on 1.2.10-1 the user agent still has to be set manually.

tpfau commented 4 months ago

But how do you set it at all for the UI version? In my network manager, there is no optio to set the user Agent anywhere.

arashbm commented 4 months ago

It seems to be there in the newer version: image

tpfau commented 4 months ago

Ok, well... I'll be waiting till 24.04 then since 22.04 doesn't seem to get that upgrade. :/

rkdarst commented 3 months ago

Is there any reason to not merge this right now?

rkdarst commented 2 months ago

I'm just merging this, it's better than before. I'm sorry it took so long - thanks for the info!