ohwgiles / NetworkManager-f5vpn

NetworkManager plugin for accessing F5 SSL VPNs
7 stars 1 forks source link

Does it support sms OTP? #6

Closed alperenkose closed 3 years ago

alperenkose commented 3 years ago

Hi,

After entering username and password on popup, it fails with the following output on syslog. It should have asked for a one time password instead, does the plugin support it?

final secrets request failed to provide sufficient secrets

Thanks,

ohwgiles commented 3 years ago

It depends on the method the server uses to request the OTP. Essentially, the popup tries to replace the web form flow by parsing the HTML returned from the login page. This will only work if it has not been too customized. The plugin has been tested to work with such simple pages which request an OTP in the same form as the username/password request (see this code which looks for <input> tags).

This clearly isn't good enough for all servers. As suggested in #5, another way to support this would be having a "use web login" mode, which delegates the authentication to the browser, and installs a .desktop handler to complete the flow when the authentication in the browser finishes.

ohwgiles commented 3 years ago

NB: Web login implemented in 807a7f208e084364fc80b5170223004f42526e48