OpenConnect server and Radius

[Nikos Mavrogiannopoulos]

On Fri, Apr 22, 2016 at 9:08 AM, Anton Shilov <ashilov at arqatech.com> wrote:
> Hi!
> I use RADIUS-server windows 2008 for users' authorization and OpenConnect
> Server working at CENTOS 7. Login goes well and I get connected VPN, but I
> cannot understand how to use RADIUS attribute Group-Name in order to link
> group parameters from "config-per-group". I don't find Group-Name attribute
> at windows RADIUS-server. For example, CISCO ASA uses Filter-Id
> standart-attribute for same cases. I think openconnect doesn't support this
> attribute. Am I right?. Do you have any plans to add that opportunity in
> future?

You cannot. This support is being rewritten in the master branch.
There you can use the Class attribute to provide groups in the format
"OU=group1;group2". Would that cover your use case?

regards,
Nikos