Cert auth + Group not working
Description of problem:
Connecting with certificate enabled auth and cert-user-oid = 2.5.4.3 + cert-group-oid = 2.5.4.11 it isn't possible to login.
User certtificate DN contains: OU and CN:
Version of ocserv used:
1.4.0
Client used:
Cisco AnyConnect Windows 4.10.08025
Distributor of ocserv
docker
How reproducible:
- Cert auth enable
- cert-user-oid = 2.5.4.3
- cert-group-oid = 2.5.4.11
Actual results:
While connecting Cisco Anyconnect asks for group select:
after selecting a group, oscerv asks for username and password, but with group option
At the end fails:
In ocserv logs:
ocserv[13]: worker: 170.170.170.1 client certificate verification succeeded
...
ocserv[/13]: worker: 170.170.170.1 cannot find 'group-select' in client XML message ocserv[13]: worker: 170.170.170.1 cannot find 'group-select' in client XML message ocserv[13]: worker: 170.170.170.1 failed reading groupname ocserv[13]: TLS[<3>]: ASSERT: common.c[_gnutls_strdatum_to_buf]:1512 ocserv[13]: TLS[<3>]: ASSERT: dn.c[_gnutls_x509_parse_dn_oid]:344 ocserv[13]: TLS[<3>]: ASSERT: dn.c[_gnutls_x509_parse_dn_oid]:442 ocserv[13]: TLS[<3>]: ASSERT: x509.c[gnutls_x509_crt_get_dn_by_oid]:1183 ocserv[13]: worker: 170.170.170.1 user has not selected a group ocserv[13]: worker: 170.170.170.1 HTTP sending: 200 OK