[TriLUG] Issue with Cisco AnyConnect and WebKit

[James Toebes via TriLUG]

I am connecting to an AnyConnect VPN via Network Manager.  one of the 
protocols available for VPN connections is Cisco AnyConnect or 
OpenConnect.
I configure that,  use the address as gateway address and set token mode 
to TOTP - Manually entered.  When I connect,  it ask for username and my 
Token ID.   After connecting,   go to browser,  it should indicate 
network needs login.   That's it.

If for some reason the portal detect does not work,   I logged in once 
with the AnyConnect client.  Got the URL that was being used for the 
connection check.   I bookmarked it so that if detect does not work,  
open the url and authenticate.

On 2021-12-07 11:06 am, Jack Hill via TriLUG wrote:

> On Tue, 7 Dec 2021, Brian McCullough via TriLUG wrote:
> 
>> Folks,
>> 
>> Once again, I come to "the Oracle" for help and guidance.
>> 
>> Since last May, I have been using Cisco's AnyConnect VPN client to
>> connect with a client's machines, successfully.
>> 
>> However, they recently changed their endpoint and asked me to change 
>> how
>> I connect.
>> 
>> Since then, nothing.
>> 
>> More specifically, the new endpoint presents a "Sign In" page, which
>> causes AnyConnect to call WebKit to present to me.
>> 
>> The page displays, I enter my ID and Password, click "Sign In" ( or
>> Enter ), and WebKit crashes.  ( As far as I can see from logs, it
>> segfaults. )
>> 
>> I am running Ubuntu 18.04.6 LTS which is as up-to-date as APT offers 
>> me.
>> 
>> My client has asked Cisco for help ( because I am strange, running 
>> Linux
>> ), and they first asked me to run some GTK+ version-checking commands,
>> and now that they all work correctly, asked me to make sure that my
>> machine is up-to-date.
>> 
>> I can still use the old endpoint, but the client ( people ) tell me 
>> that
>> that will be going away shortly, and that I must use the new one.
>> 
>> OK, after all of that, can anybody offer any suggestions?   Would a
>> dist-upgrade to 20.04 LTS have any effect on this type of issue?
>> 
>> Help?
>> 
>> Brian
> 
> Brian,
> 
> No great ideas from me, unfortunately. My experiences with and 
> up-to-date WebKitGTK for general browsing have been a bit hit or miss. 
> I'd say more, but I'm still tying to understand the issues.
> 
> That said, I'm curious to hear a bit more about how you're connecting 
> the vpn. Are you using the NetworkManager OpenConnect VPN plugin via 
> nm-applet?
> 
> I'm fortunate enough to not need an interactive browser when connecting 
> to AnyConnect vpns, so I've been able to get by running `openconnect` 
> on the command line.
> 
> Best,
> Jack