TalTech VPN - Revision history

Edlaug: /* alias */

2025-02-23T04:14:50Z

alias

← Older revision		Revision as of 07:14, 23 February 2025
Line 170:		Line 170:
	For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):		For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'
	or in case of DNS issue		or in case of [[#Possible_DNS_issue\|DNS issue]]
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1'

Edlaug: /* alias */

2025-02-23T04:13:54Z

alias

← Older revision		Revision as of 07:13, 23 February 2025
Line 170:		Line 170:
	For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):		For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'
	or		or in case of DNS issue
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1'

Edlaug: /* alias */

2025-02-23T04:05:31Z

alias

← Older revision		Revision as of 07:05, 23 February 2025
Line 170:		Line 170:
	For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):		For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'
			or
			alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1'

	Here the ''vpn'' is the alias name, which can be typed into terminal to run following command(s). Before choosing alias name, test desired alias name in terminal to see whether it does not interfere with existing commands or aliases.		Here the ''vpn'' is the alias name, which can be typed into terminal to run following command(s). Before choosing alias name, test desired alias name in terminal to see whether it does not interfere with existing commands or aliases.

Edlaug: /* OpenVPN convenient login in GNU/Linux */

2025-02-23T04:02:50Z

OpenVPN convenient login in GNU/Linux

← Older revision		Revision as of 07:02, 23 February 2025
Line 281:		Line 281:
	* create an alias:		* create an alias:
	** ''nano ~/.bash_aliases'' #open CLI text editor		** ''nano ~/.bash_aliases'' #open CLI text editor
	** ''alias vpn-~~ttu~~='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file		** ''alias vpn-taltech-openvpn='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file
	* ''source ~/.bash_aliases'' (or reopen terminal or relogin)		* ''source ~/.bash_aliases'' (or reopen terminal or relogin)
	* add permissions to run OpenVPN without entering a password		* add permissions to run OpenVPN without entering a password
	** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like		** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like
	** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file		** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file
	* type your new alias ''vpn-~~ttu~~'' in terminal to start a VPN session		* type your new alias ''vpn-taltech-openvpn'' in terminal to start a VPN session

Edlaug: /* OpenVPN */

2025-02-23T04:01:42Z

OpenVPN

← Older revision		Revision as of 07:01, 23 February 2025
Line 239:		Line 239:
	'''NB! Since July 2021 OpenVPN has been replaced by [[#eduVPN\|eduVPN]], which in turn will be since June 30, 2024 replaced by [[#Forticlient_VPN\|Forticlient VPN]].'''		'''NB! Since July 2021 OpenVPN has been replaced by [[#eduVPN\|eduVPN]], which in turn will be since June 30, 2024 replaced by [[#Forticlient_VPN\|Forticlient VPN]].'''

	Allows to access the ~~TTU~~ library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID\|Uni-ID account]] is required.		Allows to access the TalTech library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID\|Uni-ID account]] is required.

	==OpenVPN client software==		==OpenVPN client software==

Edlaug: /* OpenFortiVPN installation */

2025-02-23T03:59:08Z

OpenFortiVPN installation

← Older revision		Revision as of 06:59, 23 February 2025
Line 53:		Line 53:

	===OpenFortiVPN installation===		===OpenFortiVPN installation===

			====Arch and its based====

	Arch Linux and its based distros can be installed [https://aur.archlinux.org/packages/openfortivpn-git openfortivpn-git] (often newer) or [https://archlinux.org/packages/extra/x86_64/openfortivpn/ openfortivpn]. Before installing it is worth to ensure, which one is newer version. Since version 1.23 there is also [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication support (see [https://github.com/adrienverge/openfortivpn/blob/master/CHANGELOG.md CHANGELOG] and search with CTRL+F text: 1.23.0). [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication is required to use TalTech VPN.		Arch Linux and its based distros can be installed [https://aur.archlinux.org/packages/openfortivpn-git openfortivpn-git] (often newer) or [https://archlinux.org/packages/extra/x86_64/openfortivpn/ openfortivpn]. Before installing it is worth to ensure, which one is newer version. Since version 1.23 there is also [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication support (see [https://github.com/adrienverge/openfortivpn/blob/master/CHANGELOG.md CHANGELOG] and search with CTRL+F text: 1.23.0). [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication is required to use TalTech VPN.
Line 58:		Line 60:
	Instead of ''yay'' there can be used any other [https://wiki.archlinux.org/title/AUR_helpers AUR helper]		Instead of ''yay'' there can be used any other [https://wiki.archlinux.org/title/AUR_helpers AUR helper]

	In Ubuntu:		====In Ubuntu====

	sudo apt update && sudo apt install gcc automake autoconf libssl-dev make pkg-config && sudo apt-get clean		sudo apt update && sudo apt install gcc automake autoconf libssl-dev make pkg-config && sudo apt-get clean
	git clone https://github.com/adrienverge/openfortivpn		git clone https://github.com/adrienverge/openfortivpn
Line 70:		Line 73:
	# sudo make install		# sudo make install
	</code>		</code>

			====Other distros====

	Also in [https://github.com/adrienverge/openfortivpn/blob/master/README.md openfortivpn README] are described usage and compilation in other Linux distros.		Also in [https://github.com/adrienverge/openfortivpn/blob/master/README.md openfortivpn README] are described usage and compilation in other Linux distros.

Edlaug: /* Possible DNS issue */

2025-02-23T03:57:34Z

Possible DNS issue

← Older revision		Revision as of 06:57, 23 February 2025
Line 162:		Line 162:
	To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.		To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.

			====alias====
	For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):		For convenient usage in GNU/Linux you can use bash alias in ~/[[.bash_aliases]] file (or whatever [https://en.wikipedia.org/wiki/Unix_shell shell] you use - its alias):
	alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'		alias vpn='sudo openfortivpn vpn.taltech.ee:443 --saml-login'
Line 171:		Line 172:
	... or reopen terminal window or if server, relogin user.		... or reopen terminal window or if server, relogin user.

			====sudoers====
	To allow regular user use openfortivpn as superuser without entering password, there can be used sudoers and create a file e.g. with name ''/etc/sudoers.d/permissions''		To allow regular user use openfortivpn as superuser without entering password, there can be used sudoers and create a file e.g. with name ''/etc/sudoers.d/permissions''
	sudo visudo -f /etc/sudoers.d/permissions		sudo visudo -f /etc/sudoers.d/permissions
Line 180:		Line 182:
	Instead of ''username'' write actual username or use group name, e.g. ''%sudo'' to allow all ''sudo'' group members.		Instead of ''username'' write actual username or use group name, e.g. ''%sudo'' to allow all ''sudo'' group members.

			====config file====
	Using openfortivpn config file with [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication might not work as [https://github.com/adrienverge/openfortivpn/issues/1271 described in this issue].		Using openfortivpn config file with [https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language SAML] authentication might not work as [https://github.com/adrienverge/openfortivpn/issues/1271 described in this issue].

Edlaug: /* OpenFortiVPN connecting */

2025-02-23T03:55:45Z

OpenFortiVPN connecting

← Older revision		Revision as of 06:55, 23 February 2025
Line 149:		Line 149:
	Usually users have TalTech Uni-ID already authenticated in default web browser, then this will work immediately and VPN will be authenticated and start working. Be aware to avoid any other organization Microsoft account authentication in same (default) web browser to avoid authentication conflict.		Usually users have TalTech Uni-ID already authenticated in default web browser, then this will work immediately and VPN will be authenticated and start working. Be aware to avoid any other organization Microsoft account authentication in same (default) web browser to avoid authentication conflict.

			====Possible DNS issue====
	If there is an issue with DNS:		If there is an issue with DNS:
	INFO: Adding VPN nameservers...		INFO: Adding VPN nameservers...

Edlaug: /* OpenFortiVPN connecting */

2025-02-23T03:53:49Z

OpenFortiVPN connecting

← Older revision		Revision as of 06:53, 23 February 2025
Line 156:		Line 156:
	sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1		sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1
	Although this error does not affect name resolving.		Although this error does not affect name resolving.
			There could be tried also to enable certain service
			sudo systemctl enable --now systemd-resolved

	To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.		To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.

Edlaug: /* OpenFortiVPN connecting */

2025-02-23T03:42:07Z

OpenFortiVPN connecting

← Older revision		Revision as of 06:42, 23 February 2025
Line 155:		Line 155:
	... then use following parameters (see also [https://github.com/adrienverge/openfortivpn/issues/555 this issue]):		... then use following parameters (see also [https://github.com/adrienverge/openfortivpn/issues/555 this issue]):
	sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1		sudo openfortivpn vpn.taltech.ee:443 --saml-login --set-dns=0 --pppd-use-peerdns=1
	Although this error ~~message~~ does not affect name resolving.		Although this error does not affect name resolving.

	To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.		To cancel VPN connection, press CTRL+C in terminal, where VPN is connected.