Using openconnect with OKTA for Cisco Anyconnect VPN on F30
by Ranjan Maitra
Hi,
Our university recently went to using two-factor authentication for VPN connections. We use Cisco's anyconnect. I went back to using the Cisco application which would open a window and type in the password and the OKTA code. It worked all right, aside from the fact that I had to chafe every time I thought of a closed-source application on my otherwise OSS system.
After yesterday's F30 updates, the window opens but nothing happens in there (I get a completely blank white screen). I wonder if anyone has a suggestion as to what I should be looking at.
But more importantly, I was wondering how to make openconnect work with the OKTA 2FA. I found information on something called GlobalProtect, but not much on AnyConnect, which is strange because as per openconnect, it says that it is a "openconnect - Multi-protocol VPN client, for Cisco AnyConnect VPNs and others" or maybe I did not look at the correct places.
Does anyone have any suggestions and/or experience with using OKTA with anyconnect/openconnect and can help?
Many thanks and best wishes,
Ranjan
--
Important Notice: This mailbox is ignored: e-mails are set to be deleted on receipt. Please respond to the mailing list if appropriate. For those needing to send personal or professional e-mail, please use appropriate addresses.
4 years, 8 months
OT: Macro for day and time in metapost
by olivares33561＠protonmail.com
Dear kind folks,
Is there a way to get day and time in a metapost document? I can get it from shell or from the document created, but a command/macro would be preferred.
$ cat 20190906.mp
verbatimtex
%&latex
\documentclass{minimal}
\begin{document}
etex
beginfig(0);
drawdblarrow (-60,0)--(60,0);
drawdblarrow (0,60)--(0,-60);
drawarrow (0,0)--(30,54);
drawarrow (-60,0)--(60,0);
label.bot(btex $A$ etex, (6,64));
label.bot(btex $B$ etex, (62,0));
label.bot(btex $C$ etex, (0,-62));
label.bot(btex $D$ etex, (-60,0));
label.bot(btex $E$ etex, (6,-6));
label.bot(btex $F$ etex, (32,54));
label.lft(btex $\hbox{ BELL WORK }$ etex, (-60,-24));
label.lft(btex $\hbox{ Fri Sep 6 08:55:48 CDT 2019
}$ etex, (-60,-36));
%label.bot(btex $10x - 2$ etex, (0,24));
%label.bot(btex $9x + 12 $ etex, (0,-16));
label.bot(btex $10x + 5$ etex, (28,16));
label.bot(btex $\overline{AC} \perp \overline{DB}$ etex, (-60,-48));
label.bot(btex $13x + 9$ etex, (-28,16));
label.bot(btex $m\angle AEF = $ etex, (-60,-60));
label.bot(btex $m\angle AED = $ etex, (-60,-72));
label.bot(btex $m\angle FEB = $ etex, (-60,-84));
label.lft(btex $x = $ etex, (-32,-102));
label.lft(btex $\angle AED \hbox{ and } \angle BEC \hbox{ are }$ etex, (-32,-114));
label.urt(btex $\hbox{A) vertical} $ etex, (-32,-126));
label.urt(btex $\hbox{B) supplementary} $ etex, (-32,-140));
label.urt(btex $\hbox{C) complementary} $ etex, (-32,-154));
endfig;
$
We can see
%%Creator: MetaPost
%%CreationDate: 2019.09.07:0852
But can we see it the document itself when viewed by gv? Or by okular/evince?
Thanks in advance,
Antonio
Sent from [ProtonMail](https://protonmail.ch), encrypted email based in Switzerland.
4 years, 8 months
Re: ssh
by Richard
> Date: Saturday, September 14, 2019 22:13:11 +0800
> From: Ed Greshko <ed.greshko(a)greshko.com>
>>> On 9/14/19 9:34 PM, Patrick Dupre wrote:
>
>>> From the remote system, what do you get when you try to "telnet"
>>> to port 22?
>>>
>> telnet 192.168.1.12
>> Trying 192.168.1.12...
>> telnet: connect to address 192.168.1.12: No route to host
>>
>> I guess that I need to reestablish the route.
>> How?
>>
>
> No, that is an indication that port 22 is not open.
>
Actually, it looks like you did a telnet to the (default) telnet port
(23):
> telnet 192.168.1.12
rather than the ssh port (22), as Ed suggested:
> telnet 192.168.1.12 22
which is what is needed to get meaningful results.
Try the telnet to the ssh port and see what you get. It may be a
firewall issue, but the results you showed don't appear to be a test
of the issue.
4 years, 8 months
ssh
by Patrick Dupre
Hello,
ssh does not respond (time out, the machine is OK). Hence, I restarted it and
systemctl status sshd
● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset>
Active: active (running) since Sat 2019-09-14 15:26:06 CEST; 32s ago
Docs: man:sshd(8)
man:sshd_config(5)
Main PID: 29012 (sshd)
Tasks: 1 (limit: 4915)
Memory: 1.0M
CGroup: /system.slice/sshd.service
└─29012 /usr/sbin/sshd -D -oCiphers=aes256-gcm(a)openssh.com,chacha20->
Sep 14 15:26:06 Teucidide systemd[1]: Starting OpenSSH server daemon...
Sep 14 15:26:06 Teucidide sshd[29012]: Server listening on 0.0.0.0 port 22.
Sep 14 15:26:06 Teucidide sshd[29012]: Server listening on :: port 22.
Sep 14 15:26:06 Teucidide systemd[1]: Started OpenSSH server daemon.
But it is not enough.
What else should I do?
Thank.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
4 years, 8 months
Finding various broken symbolic links?
by Michael D. Setzer II
Have run find . -xtype l in past on systems in various directories to find bad
links. Recently did it from the root directory on a few systems, and found a
number of bad links. Not sure if these are just left over links from updates?
+------------------------------------------------------------+
Michael D. Setzer II - Computer Science Instructor (Retired)
mailto:mikes@guam.net
mailto:msetzerii@gmail.com
Guam - Where America's Day Begins
G4L Disk Imaging Project maintainer
http://sourceforge.net/projects/g4l/
+------------------------------------------------------------+
http://setiathome.berkeley.edu (Original)
Number of Seti Units Returned: 19,471
Processing time: 32 years, 290 days, 12 hours, 58 minutes
(Total Hours: 287,489)
BOINC@HOME CREDITS
ROSETTA 66311323.990119 | ABC 16613838.513356
SETI 109804121.703177 | EINSTEIN 141859222.999240
4 years, 8 months
firefox 69 and css
by François Patte
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Bonjour,
While upgrading to firefox 69, the css syntax to configure firefox
seems to have been changed (once more..... programmers think that
people have time to waste!) .
Once upon a time, I found the syntax to have my tab-bar below the
other bars (lot of waste time), and now, with the last version of
firefox, this is lost.
I continue to waste my time, desperatly searching what is the right
syntax, but I did not find any clue.
Does anybody have information?
Thank you.
- --
François Patte
UFR de mathématiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Université Paris Descartes
45, rue des Saints Pères
F-75270 Paris Cedex 06
Tél. +33 (0)6 7892 5822
http://www.math-info.univ-paris5.fr/~patte
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAl2A9IUACgkQdE6C2dhV2JUs0ACfYMu10iuR1nSx93A26F4/xorT
YY0AoJOtjyndx2WBevQ31qOwY5dtqE67
=2yUU
-----END PGP SIGNATURE-----
4 years, 8 months
Gnome Software Updater no longer working
by Robin Lee
Hi
I'm running Fedora 29 and some time ago the Gnome Software Updater
stopped working.
It informs me that there are new updates available and I press the
Download button. After a while the button changes to Restart and Update
and I press it, so the computer reboots and after that it briefly
displays Installing new updates; this could take a while. But then it
just reboots right away and when the system comes up but no updates
have been installed. Gnome Software Updater displays the same software
packages as available for updating. If I run yum update, then the
software packages are updated just fine.
Any idea what's wrong here?
Could this problem block me from doing an upgrade to Fedora 30?
Cheers
Robin
4 years, 8 months
repositories very out-of-date for Thunderbird version?
by home user
I very recently asked a question in the Thunderbird support forum. One
person replied
"Find yourself an updated Thunderbird...".
I have version 60.7.0; the person implied that the current version is
68. That's 8 versions out-of-date. I do a "dnf upgrade" every Thursday.
I did a "dnf check-update thunderbird" this afternoon.. No new versions
are available. Why are the repositories so far behind on Thunderbird?
thanks,
Bill.
4 years, 8 months
pip and python version
by Robert Moskowitz
I am getting dreadful warnings about my version of python when I run
pip. So I asked about this with the developers of the script I use
(xml2rfc). I bit of version testing and:
$ pip --version
pip 19.0.3 from /usr/lib/python2.7/site-packages/pip (python 2.7)
$ pip2 --version
pip 19.0.3 from /usr/lib/python2.7/site-packages/pip (python 2.7)
$ pip3 --version
pip 19.0.3 from /usr/lib/python3.7/site-packages/pip (python 3.7)
and
$ ls -ls /usr/bin/pip*
4 -rwxr-xr-x. 1 root root 408 Jul 17 04:23 /usr/bin/pip
0 lrwxrwxrwx. 1 root root 9 Jul 17 04:23 /usr/bin/pip-2 -> ./pip-2.7
4 -rwxr-xr-x. 1 root root 408 Jul 17 04:23 /usr/bin/pip2
0 lrwxrwxrwx. 1 root root 8 Jul 17 04:23 /usr/bin/pip-2.7 -> ./pip2.7
4 -rwxr-xr-x. 1 root root 408 Jul 17 04:23 /usr/bin/pip2.7
0 lrwxrwxrwx. 1 root root 9 Jul 17 04:23 /usr/bin/pip-3 -> ./pip-3.7
4 -rwxr-xr-x. 1 root root 408 Jul 17 04:23 /usr/bin/pip3
0 lrwxrwxrwx. 1 root root 8 Jul 17 04:23 /usr/bin/pip-3.7 -> ./pip3.7
4 -rwxr-xr-x. 1 root root 408 Jul 17 04:23 /usr/bin/pip3.7
24 -rwxr-xr-x. 1 root root 22816 Jun 19 10:44 /usr/bin/pipewire
so pip does not seem to be a symlink to pip2, but perhaps just a copy?
I suspect I will still be running F30 come Jan 2020 when Python 2.7 gets
the axe:
DEPRECATION: Python 2.7 will reach the end of its life on January 1st,
2020. Please upgrade your Python as Python 2.7 won't be maintained after
that date. A future version of pip will drop support for Python 2.7.
Do I need to do anything, or will this be self-correcting come the new year?
thanks
4 years, 8 months
Icon on screen FRitzBox Fedora 30.
by Ger van Dijck
Hi Fedora World .
I have a maybe stupid question : I use a Fritz-Box 7490 and try to install
Icons on screen : fritz.nas , fritz.mediaserver , myfritz , but one way or
another I do not manage this item .
Is there a solution ?
Kind regards ,
Ger van Dijck .
Using Opera's mail client: http://www.opera.com/mail/
4 years, 8 months
