Yes, even in the latest version, it does not support authentication with pkcs#11 smart cards - https://wiki.gnome.org/Projects/NetworkManager/PKCS11 I was following guidance from http://www.infradead.org/openconnect/pkcs11.html, http://www.infradead.org/openconnect/nonroot.html and Mr. Woodhouse in configuring my systems this way. --Sean On Wed, Nov 2, 2016 at 4:46 AM, Nikos Mavrogiannopoulos <n.mavrogiannopoulos at gmail.com> wrote: > On Tue, Nov 1, 2016 at 8:37 PM, Sean <smalder73 at gmail.com> wrote: >> Hi, >> I am using openconnect from Enterprise Linux 7 distributions to >> connect to a Cisco VPN, authenticating with a PCKS#11 smart card. >> When an unprivileged user connects externally two issues arise. >> >> 1. Name resolution doesn't get updated with the VPN's name servers. I >> guess this is because NetworkManager sets /etc/resolv.conf, and >> openconnect is being executed outside of NetworkManager, though I'm >> not certain. > > Since you are using network manager, have you tried using the > networkmanager-openconnect plugin from epel? That would integrate with > the rest of the system. > > regards, > Nikos
