JMU OpenConnect

This is a wrapper script around openconnect to help with authentication for the JMU VPN on Linux. Openconnect used to work fine until Ivanti purchased Pulse Secure, and then that broke something. This script opens up a web browser to allow the user to authenticate with Duo, and then grabs the DSID cookie to use for openconnect authentication.

Installation

This script can easily be installed with pip or pipx with the following commands:

$ pipx install jmu-openconnect
$ # OR
$ pip3 install jmu-openconnect

Usage

Once the script is installed, you can run the following command in your terminal:

$ jmu-openconnect

You can also specify a username and password to be automatically typed in, however you will still have to do 2FA manually. You can specify one or the other or both, and if both are specified, the "Log in" button will automatically be clicked.

$ jmu-openconnect -u <EID> -p <PASSWORD>

You can alternatively specify the --prompt-password (or -P) option instead of using -p, which will prompt the user for a password without echoing, much like sudo. This is more secure as your password won't be saved in your command line history.

JMU OpenConnect defaults to using firefox, but you can easily change which browser you're using by specifying --browser, which accepts firefox, chrome, or edge.

The first time that you launch JMU OpenConnect, it may take a little longer than normal, as selenium has to download and cache your webdriver.

$ jmu-openconnect --browser chrome

To see all of the available options, run jmu-openconnect --help.

Dependencies

This script just requires openconnect and selenium. If you are having problems, check the Selenium Python Documentation.

DSID Cookie was not found

If you get the error that the DSID cookie was not found, then you may be logged on in multiple places at once. Navigate to https://vpn.jmu.edu and after signing in, you should see a screen like this:

If this is the case, just select the box to remove that sign in and press "Close Selected Sessions and Log in". After this, you will need to press the log out button in the upper right corner of the VPN website, and then you can retry the script. If this is not the problem, try running the script with jmu-openconnect --debug-auth-error to see the error for a longer period of time.