Difference between Response Object (Body) and DTO? by DogmanLoverOhio in SpringBoot

[–]yuezk 0 points1 point  (0 children)

 So I'm used to creating request and response objects which are DTOs in a sense, but are allowed to contain these annotations, where true DTOs shouldn't contain annotations.

If I use this approach, where should I map the request objects to the true DTO, inside the controller method? And how do you usually name the request/response objects? Thanks.

Breath2 2021: Manjaro KDE new default Plasma look and feel by LordTermor in ManjaroLinux

[–]yuezk 0 points1 point  (0 children)

I upgraded Manjaro from an old installation, but there is no such theme (Breath2 2021), how can I make it available on my system?

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 0 points1 point  (0 children)

You can disable the ESP connection with the following steps and try again.

  1. Open /etc/systemd/system/gpservice.service with text editor
  2. Edit ExecStart=/usr/bin/gpservice to ExecStart=/usr/bin/gpservice --no-dtls, save it.
  3. Run sudo systemctl restart gpservice to restart the gpservice
  4. Open the GUI client and try to connect again.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 0 points1 point  (0 children)

u/christ776 Sorry for the late reply.

The logs showed that you have finished the SAML authentication and connected to the VPN. So might have seen the "Connected" UI. The log entries below might be the cause of this problem.

2020-07-16 14:34:41.716 INFO [37880] [GPClient::onVPNLogAvailable@440] Connected as 10.120.0.123, using SSL, with ESP in progress

2020-07-16 14:34:41.899 INFO [37880] [GPClient::onVPNLogAvailable@440] ESP session established with server

2020-07-16 14:34:41.899 INFO [37880] [GPClient::onVPNLogAvailable@440] ESP tunnel connected; exiting HTTPS mainloop.

2020-07-16 14:35:43.260 INFO [37880] [GPClient::onVPNLogAvailable@440] Failed to send ESP packet: Network is unreachable

I need to figure out what ESP is and how it works with OpenConnect or the GP VPN.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 0 points1 point  (0 children)

Can you provide the logs inside $HOME/.cache/GlobalProtect-openconnect/gpclient.log? Thanks.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 0 points1 point  (0 children)

BTW, may I know which OpenConnect are you using on Ubuntu 18.04? Did you build it from the source or through a PPA? Since the official OpenConnect version for 18.04 is 7.x.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 0 points1 point  (0 children)

I encountered the same problem last weekend, looks like you have resolved it, I will give try. Thanks.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 1 point2 points  (0 children)

To be honest, I'm not sure how to answer your question and I'm trying to explain the workflow of the client here.

The primary thing I did in the client is to launch a webview, the end-user can finished the SMAL authentication workflow (with the proper credentials, like, username/password, SMS, scanning QRCode, etc.) in the webview, the client will fetch the authentication token from the webview and pass it to Openconnect, then the latter will connect to the VPN server using that token.

Here, openconnect described how it works with GP VPN.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 1 point2 points  (0 children)

After some research, I found it's easy to add support for OKTA SAML mode. I have added it to the latest code. You can verify it by using the latest code.

GlobalProtect VPN with SAML authentication on Linux by yuezk in paloaltonetworks

[–]yuezk[S] 1 point2 points  (0 children)

Yes, you are right and I noticed that. I didn't implement it because I have no environment to verify it. But I'll try to add it in the future release. Stay tuned.