Skip to content

Conversation

mchehab
Copy link

@mchehab mchehab commented Dec 5, 2023

The system environment may have proxy set, which is needed after connecting with the VPN. Using it for the actual VPN won't work, as it would try to connect to an internal proxy without success.

Ensure that no proxies will be used during SAML dialogs.

Caught this while trying to connect with Palo Alto Network GlobalConnect with SAML configured to login via Microsoft cloud.

The system environment may have proxy set, which is needed after
connecting with the VPN. Using it for the actual VPN won't work,
as it would try to connect to an internal proxy without success.

Ensure that no proxies will be used during SAML dialogs.
By default, webkit dialog use system proxy settings. This may
cause troubles if such settings exist at the system to be used
only after VPN connection.

So, add an option to disable it at the webkit dialog window.

Signed-off-by: Mauro Carvalho Chehab <[email protected]>
@@ -264,6 +264,11 @@ import (NMVpnEditorPlugin *iface, const char *path, GError **error)
if (true)
nm_setting_vpn_add_data_item (s_vpn, NM_OPENCONNECT_KEY_PREVENT_INVALID_CERT, "yes");

/* Don't use system proxy settings during authentication */
bval = g_key_file_get_boolean (keyfile, "openconnect", "DontUseProxyAuth", NULL);
if (true)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be 'if (bval)' ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants