Error: Login failed (no MultiChallenge)

[edvasqueza]

Hello, I'm getting this error:

snxconnect -H ... -U ... -D
sslvpn/Login/Login
https://.../sslvpn/Login/Login
sslvpn/Login/../Login/JS_RSA.js
{'modulus': '...', 'exponent': '...'}
sslvpn/Login/Login
https://.../sslvpn/Login/Login
Date: Fri, 26 Jan 2018 18:59:04 GMT
Server: CPWS
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-store
Vary: User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8


Login failed (expected MultiChallenge)
Login failed (no MultiChallenge): https://.....

Any ideas what is going on?

Thanks!

[maxsalov]

I got the same error.
In my case, the problem was in the path to the pages.
Firstly I used additional parameter "-F Login/Login". Secondly, I found that in the script hardcoded another file path "sslvpn/SNX/extender" in two places. I changed it to "SNX/extender", installed an edited script and got established connection!
Note, I used a script from a git, not pypi.

[Jancis]

Good job, @maxsalov! Do a diff and create PR that fixes the issue!

[Jancis]

Sorry to hijack the issue, but for anyone having issue with MultiChallenge, I made a fork that makes it optional.
Jancis@3c8e83a
But use it with caution as I also removed SSL validation there (newest python in my system now wants to use it's own cert storage instead of global). I have to rewrite that part, but in case you want to use VPN right away, my fork could help.

[Jancis]

Made PR (#11) that should fix this issue.

[vpegado]

@maxsalov Made the extender path configurable in #15

[lpalgarvio]

#15 works for me!

[erzads]

I am struggling with this issue. I have been using vanilla snx for a while, but today someone updated the checkpoint TLS to 1.1 and that made every linux user unable to connect.
I am trying to use snxvpn but I get the multichallenge error.
We use a token system and normally we just concatenate the token to our password, but that doesn't seem to work with snxvpn.

~/.local/bin/snxconnect -H vpn.host.com -U USERNAME -p https -F Login/Login -D -P PASSWORDPLUSTOKEN
Login/Login
https://vpn.host.com/sslvpn/Login/Login
Login/../Login/JS_RSA.js
{u'modulus': u'c904cd14...', u'exponent': u'010001'}
sslvpn/Login/Login
https://vpn.host.com/sslvpn/Login/Login
Date: Fri, 12 Apr 2019 16:26:25 GMT
Server: CPWS
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' localhost:14186 www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'; img-src https:; font-src 'self' data: fonts.gstatic.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Pragma: no-cache
Cache-Control: no-store
X-XSS-Protection: 1; mode=block
Vary: User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Login failed (expected MultiChallenge)
Login failed (no MultiChallenge): https://vpn.host.com/sslvpn/Login/Login

[tuxflo]

Same issue here also using hardware token + PIN combination.

[bpottier]

Same issue here also using hardware token + PIN combination.

Any update on this?