On Mon, Feb 3, 2014 at 8:32 PM, Michael Cronenworth <mike at cchtml.com> wrote: >> 1) Revert back to 5.01. This will use XML POST by default, and since >> you're choosing the first authgroup, you shouldn't hit the old >> authgroup selection problem. > > > Still won't auth. http://fpaste.org/74172/48822413/ > > >> 2) Use the head of tree from git.infradead.org. This will also use >> XML POST, and the authgroup logic should work as expected. > > > Won't auth. http://fpaste.org/74173/39148827/ > > I have to use a token at the end of my password, which is correctly entered. > Not sure if this causes any problems for openconnect. > > Our VPN used to use vpnc and I was able to connect without a problem > (including the token). What kind of token? Does the login form normally know anything about it, or does it just see one long password string? Can you log on using the Cisco AnyConnect client for Android or iOS?