On Aug 16, 2018 7:00 AM, <alessandro.narzisi at gmail.com> wrote: > > Hi to all, > > i try to use openconnect to connect at my business vpn, untill few > month ago i able to connect, but now, after an upgrade of server i > receive an error of > > X-Aggregate-Auth: 1 > HTTP body chunked (-2) > Login denied, unauthorized connection mechanism, contact your > administrator. You've given the final error message, but not the client/server interactions which led up to it. You should run with `openconnect --dump -vvvv` and post more of the log, if possible. > Seems that the authentication mode "EAP-Anyconnect" is not supported in > this version of openconnect client. > > I would ask you if there is some option in openconnect to specify > authentication mode EAP-Anyconnect. > > If i use app on android Cisco Anyconnect i have no problem. It appears that your server is expecting to be able to use some external authentication mode, which is perhaps available through the Cisco Windows or MacOS clients. You can use `openconnect --os=android` to spoof an Android client. This might cause the server to fall back to a more "normal" HTTP-based authentication mode. Dan
