Cannot authenticate

[Kevin Cernekee]

On Mon, Feb 3, 2014 at 6:21 PM, Michael Cronenworth <mike at cchtml.com> wrote:
> I am attempting to connect to my work's VPN. Windows users download the Any
> Connect client, but I cannot connect with openconnect. I've run with
> "--verbose" and pasted the contents online. The company's site and my
> username have been obfuscated.
>
> http://fpaste.org/74145/80367139/

Interesting.  In non-XML-POST mode (the default on 5.02 for gateways
with authgroups present), it returns the 204 error instead of the
usual "Login failed."  In XML POST mode I get "Authentication failed."
which is a little different too.

I will try it with AnyConnect + MITM to see what happens.

Two things you can try:

1) Revert back to 5.01.  This will use XML POST by default, and since
you're choosing the first authgroup, you shouldn't hit the old
authgroup selection problem.

2) Use the head of tree from git.infradead.org.  This will also use
XML POST, and the authgroup logic should work as expected.