vpn-manager/globalprotect-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Fixed the generic names for the connection types

Browse Source
This commit is contained in:
Ezri Brimhall 2025-06-25 14:09:23 -06:00
parent f69b586aa9
commit 240ec5c64b
Signed by: ezri
GPG Key ID: 058A78E5680C6F24
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/vpn_manager_globalprotect/backend.py
View File

@ -101,7 +101,7 @@ class GlobalProtectConnection(
if not verify:
# Disabling certificate verification is extremely dangerous and should only be done if you KNOW WHAT YOU ARE DOING
self.logger.warn("Certificate verification disabled! This is dangerous!")
if options.get("login_target").value == LoginTarget.GATEWAY:
if options.get("login_target").value in {LoginTarget.GATEWAY, LoginTarget.SSL}:
url = f"{options.get('hostname').value}/ssl-vpn/prelogin.esp"
else:
url = f"{options.get('hostname').value}/global-protect/prelogin.esp"
@ -248,7 +248,7 @@ class GlobalProtectConnection(
"--protocol=gp",
f"--user={auth.value.get('saml-username')}",
"--useragent=PAN GlobalProtect",
f"--usergroup={options.get('login_target', Variant('s', LoginTarget.PORTAL)).value == LoginTarget.PORTAL and 'portal' or 'gateway'}:prelogin-cookie",
f"--usergroup={options.get('login_target', Variant('s', LoginTarget.PORTAL)).value in {LoginTarget.PORTAL, LoginTarget.IPSEC} and 'portal' or 'gateway'}:prelogin-cookie",
"--passwd-on-stdin",
options.get("hostname").value,
"-b",
@ -421,6 +421,7 @@ class GlobalProtectConnection(
LoginTarget.SSL,
LoginTarget.IPSEC,
],
default=LoginTarget.IPSEC,
),
ConfigSpec(
name="spoof_clientos",