]> www.infradead.org Git - users/dwmw2/openconnect.git/commit
Send 'cas-support=yes' in GlobalProtect prelogin request
authorDaniel Lenski <dlenski@gmail.com>
Mon, 25 Sep 2023 14:14:37 +0000 (07:14 -0700)
committerDaniel Lenski <dlenski@gmail.com>
Tue, 20 Feb 2024 01:53:29 +0000 (17:53 -0800)
commit026cd2d6aa18f7d2292b3993f64e37773e8a79dd
treec565f89ab4c19c52bbb075979bfe0749c844636d
parent1e02c779245c38ba935250ae3449efc7922c74da
Send 'cas-support=yes' in GlobalProtect prelogin request

Per https://gitlab.com/openconnect/openconnect/-/issues/651, some newer GP
servers are responding to prelogin.esp requests with an error:

    CAS is not supported by the client.  Minimum client version is 6.0

It appears that CAS ("Central Authentication Server";
https://apereo.github.io/cas/index.html) is a standardized single-sign-on
protocol requiring an external browser.

Per https://gitlab.com/openconnect/openconnect/-/issues/651#note_1576596243,
the field 'cas-support=yes' needs to be sent in the POST *body* of the
prelogin request, in order to avoid this error message; the error message's
claim that a specific client software version is necessary isn't very
helpful.

Signed-off-by: Daniel Lenski <dlenski@gmail.com>
auth-globalprotect.c