Comment 24 for bug 1229195

Cory: "By looking at the code in auth.c, it appears that the user supplied authgroup is now validated against the list returned from the server as part of the xmlpost code. Adding --no-xmlpost corrects the problem because there's no list to validate against."

The current --authgroup implementation can only select options that appear in the list. See:

http://git.infradead.org/users/dwmw2/openconnect.git/blob/refs/tags/v5.01:/main.c#l1099

If the provided string does not match choice->label (for some value of choice) it will be rejected. This is true with or without --no-xmlpost.

Perhaps there is another configuration issue causing different group lists to be returned for xmlpost vs. no xmlpost?

Could you please post or email me the server's hostname?

Joseph: "Is there a fix coming for the network-manager-openconnect so that I can connect via the GUI and know VPN status?"

I have submitted another round of patches here:

http://lists.infradead.org/pipermail/openconnect-devel/2013-December/001390.html

If you have the ability to test or review these changes I would appreciate the feedback.