> I attempted to patch a --no-xmlpost option into network-manager-openconnect
FWIW, I submitted a patch[1] to add an openconnect_set_xmlpost() library function (for unrelated reasons tied to CSD/Hostscan). So on the GUI side you would just need a checkbox in the glade xml, code to save/restore/export/import the setting, and code to call the library function with the right value.
However, a better long-term solution for the group alias problem is to have the library resend the initial XML POST request with a different authgroup name when needed. Then somehow re-render the form.
One possibility might be to return a special value from the process_auth_form() callback to indicate that the UI is just requesting a group change, not submitting the whole form.
David W has also indicated that he wants to tackle the secondary password problem at the same time. I have not looked into this yet.
> I attempted to patch a --no-xmlpost option into network- manager- openconnect
FWIW, I submitted a patch[1] to add an openconnect_ set_xmlpost( ) library function (for unrelated reasons tied to CSD/Hostscan). So on the GUI side you would just need a checkbox in the glade xml, code to save/restore/ export/ import the setting, and code to call the library function with the right value.
However, a better long-term solution for the group alias problem is to have the library resend the initial XML POST request with a different authgroup name when needed. Then somehow re-render the form.
One possibility might be to return a special value from the process_auth_form() callback to indicate that the UI is just requesting a group change, not submitting the whole form.
David W has also indicated that he wants to tackle the secondary password problem at the same time. I have not looked into this yet.
[1] http:// lists.infradead .org/pipermail/ openconnect- devel/2013- October/ 001243. html