How to select a group using certificates

[yick xie]

Hello,

I set up the group config, which worked well with the radius, while
the Anyconnect client cannot select a group using a certificate. No
matter whether "cert-group-oid" enabled or the client certificate was
generated with a OU name, the client always bypassed the group select.
Hence I just inquire is it possible to allow the certificate user to
choose a group like radius users, they could belong to several groups.

My config option:

auth = "radius[config=/etc/radiusclient/radiusclient.conf]"
enable-auth = certificate
select-group = group1
select-group = group2
auto-select-group = false
config-per-group = /etc/ocserv/config-per-group/

/etc/ocserv/config-per-group/group1 include ipv4-network and ipv4-netmask config
/etc/ocserv/config-per-group/group2 include ipv4-network and ipv4-netmask config

Regards,
Yick