diff --git a/bibVPN.sh b/bibVPN.sh new file mode 100644 index 0000000..e3ff830 --- /dev/null +++ b/bibVPN.sh @@ -0,0 +1,109 @@ +#!/bin/bash + +# Get current status of a VPN connection with options to connect/disconnect. +# Working with OpenConnect, but can work with any executable VPN. Commands +# that require admin permissions should be whitelisted with 'visudo', e.g.: +# +#joesmith ALL=(ALL) NOPASSWD: /usr/local/bin/openconnect +#joesmith ALL=(ALL) NOPASSWD: /usr/bin/killall -2 openconnect + +# VPN Status +# v1.1 +# Jesse Jarzynka +# jessejoe +# Displays status of a VPN interface with option to connect/disconnect. +# http://i.imgur.com/RkmptwO.png + +VPN_EXECUTABLE=$(which openconnect) +VPN_EXECUTABLE_PARAMS="--servercert pin-sha256:NFR9+lG+7SvvEqnraijD1l5R1ShK9KKtwYjqedfx78U= --protocol=fortinet" # Optional +VPN_HOST="vpn.bib.de" +VPN_USERNAME="$2" +DIR=$(dirname "${BASH_SOURCE[0]}") +OC_PIDFILE="/var/run/openconnect/vpn.bib.de.pid" +SETTINGSFILE="$DIR/settings.csv" +ACCOUNTFILE="$DIR/accounts.csv" +SHOW_SETTINGS='ON' +# Icons +ICON_connected="iVBORw0KGgoAAAANSUhEUgAAABgAAAAWCAYAAAGtemweAAAACXBIWXMAAAsSAAALEgHS3X78AAAA+klEQVR4nNRUwQ2DMAzMKy8WYIZOwb8LtUtAJSZp34zBCn3y4Y3cWLEr13KSllKhnnRKcvHZ4AScS6BJbUSMgRCncfJcaBG0KMcvMIj83ircWcUh9VTI46onO1A75sC2FIjpT0qHwMUy4AZSzuU6a7D2smDzLRu1Fi11aKRGJOHVyzKHlGExXu5MmlkJ6HpfRHbWx5SBR+tMtjNYOuQMfGV5Lecm8HSLQf8BH9iLC2BxoRiM/Qi9SnSlS1MRG9VLIM/bH4NM7Cgp/rImYkeaU4XQW8QsDBVpk9GeSRRnDb1FyCSWVtovYpcCtZG83rLALzwvuKskSNT2xwMAAP//L6vzxgAAAAJJREFUAwBX1u55AAAAAElFTkSuQmCC" +ICON_disconnected="iVBORw0KGgoAAAANSUhEUgAAABgAAAAWCAYAAAGtemweAAAACXBIWXMAAAsSAAALEgHS3X78AAAA2klEQVR4nNxTQQ6DMAyrqvGAXfeK7Uh5wHbgyhlxaP//hDXClbLOXUHqhDZLFsGJEzUUYwq4lBIrpsiwhirQEDHxRSw69mFU/a1OJNHh+ZYILMHibThjHUtkXyuU9tdMD5GeGSQh1LF+/2hguQPRY0MTFlGEzQ6bOJYMnhzuBo1OCrjejqx0KhnSk32TdgamhyaGP4SNHNQFYPSokdpdGLJGd1yaDpT4kdWIZ/PPoBsLTriRM+igmWyQeKtYlKGDNpP1iGZQkzTxVqGbMK2Wr+KQAU09Xx/wW3gCAAD//+SvwXMAAAACSURBVAMAV9bueQAAAABJRU5ErkJggg==" +# A command that will result in your VPN password. Recommend using +# "security find-generic-password -g -a foo" where foo is an account +# in your OSX Keychain, to avoid passwords stored in plain text +GET_VPN_PASSWORD="security find-generic-password -g -a $VPN_USERNAME 2>&1 >/dev/null | cut -d'\"' -f2" + +# Command to determine if VPN is connected or disconnected +VPN_CONNECTED="ifconfig | egrep -A1 'inet 172.[123][0-9]' |cut -d' ' -f2" +# Command to run to disconnect VPN +VPN_DISCONNECT_CMD="sudo killall -2 openconnect" +# Get IP of Current VPN Tunnel +IP=$(ifconfig | egrep -A1 'inet 172.[123][0-9]' |cut -d' ' -f2) + +case "$1" in + connect) + VPN_PASSWORD=$(eval "$GET_VPN_PASSWORD") + # VPN connection command, should eventually result in $VPN_CONNECTED, + # may need to be modified for VPN clients other than openconnect + echo "$VPN_PASSWORD" | sudo "$VPN_EXECUTABLE" $VPN_EXECUTABLE_PARAMS --user "$VPN_USERNAME" --passwd-on-stdin "$VPN_HOST" --pid-file=$OC_PIDFILE --background #&> /dev/null & + + IP=$(ifconfig | egrep -A1 'inet 172.[123][0-9]' |cut -d' ' -f2) + while [ -z $IP ]; do echo "noch keine IP" ; sleep 0.5 ; IP=$(ifconfig | egrep -A1 'inet 172.[123][0-9]' |cut -d' ' -f2) ; done + msg='display notification "Erfolgreich verbunden \nConnected User: '$VPN_USERNAME'" with title "OpenFortiVPN" subtitle "Deine IP lautet: '$IP'" sound name "Brise"' + errmsg='display notification "Verbindungsversuch nicht erfolgreich" with title "OpenFortiVPN" subtitle "Schade" sound name "Brise"' + if [[ $IP =~ 172 ]] ; then osascript -e "$msg" ; else osascript -e "$errmsg" ; fi + # Wait for connection so menu item refreshes instantly + until eval "$VPN_CONNECTED"; do sleep 1; done + ;; + disconnect) + eval "$VPN_DISCONNECT_CMD" + # Wait for disconnection so menu item refreshes instantly + until [ -z "$(eval "$VPN_CONNECTED")" ]; do sleep 1; done + osascript -e 'display notification "VPN Tunnel erfolgreich geschlossen" with title "OpenFortiVPN" subtitle "Mach Feierabend" sound name "Submarine"' + ;; + newuser) + NEWUSER=$(read "Wie lautet die E-Mail des neuen Benutzers?") + NEW_VPN_PASSWORD=$("security find-generic-password -g -a $NEWUSER 2>&1 >/dev/null | cut -d'\"' -f2") + if [ -z $NEW_VPN_PASSWORD ] ; then + echo -n "Es ist noch kein Passwort im Schlüsselbund hinterlegt Bitte einmal das Passwort angeben : " ; + $GET_NEW_PASS = $(read) + fi + ;; +esac + +#if [ -n "$(eval "$VPN_CONNECTED")" ]; then +if [ -f $OC_PIDFILE ]; then + #echo "VPN ✔ | color=green" + echo "| templateImage=$ICON_connected" + echo '---' + echo "Disconnect VPN | bash='$0' param1=disconnect terminal=false refresh=true" + echo "User: $(ps -ef | grep -e '--user\ ' | cut -d' ' -f 33)" + echo "IP: $IP" + echo "---" + echo "Settings" + echo "--Farbige Icons aus" + echo "--Tunnelblick Icons aus" + echo "--Neuen User anlegen| bash='$0' param1=newuser terminal=true refresh=true" + exit +else + echo "| templateImage=$ICON_disconnected" + #echo "VPN ❌ | color=Crimson" + echo '---' + for config in (cat $ACCOUNTFILE) ; do + cfgName=$config + cfgMail= + cfgHost= + echo "Connect $cfgName VPN | bash='$0' param1=connect param2=$cfgMail param3=$cfgHost terminal=false refresh=true" + done + echo "Connect Admin VPN | bash='$0' param1=connect param2=admsct@bib.de terminal=false refresh=true" + echo "Connect ScT VPN | bash='$0' param1=connect param2=thomas.schmauder@bib.de terminal=false refresh=true" + if [[ $SHOW_SETTINGS == "ON" ]]; then + echo "---" + echo "Settings" + echo "--$SETTINGSFILE" + echo "--Farbige Icons aus" + echo "--Tunnelblick Icons aus" + echo "--Neuen User anlegen| bash='$0' param1=newuser terminal=true refresh=true" + fi + exit +fi + +#if [ -f $OC_PIDFILE ]; then