Matching client config not found on GlobalProtect
I can't connect to GlobalConnect VPN. When I use the command without the usergroup, I recieve the following output ``` openconnect --protocol=gp -u <myusername> --servercert pin-sha256:<certificate> --passwd-on-stdin <vpn-server-ip-address> <<< $(grep pass vpn | cut -d: -f2) ``` ``` POST https://<vpn-server-ip-address>/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Linux Connected to <vpn-server-ip-address>:443 SSL negotiation with <vpn-server-ip-address> Server certificate verify failed: signer not found Connected to HTTPS on <vpn-server-ip-address> with ciphersuite (TLS1.2)-(RSA)-(AES-256-GCM) Enter login credentials POST https://<vpn-server-ip-address>/global-protect/getconfig.esp Failed to parse server response Failed to obtain WebVPN cookie ``` After a little bit of googling, and reading issues I found out about the `usergroup` option. When I added it with `gateway` usergroup, I recieved a different ``` openconnect --protocol=gp -u <myusername> --servercert pin-sha256:<certificate> --passwd-on-stdin <vpn-server-ip-address> --usergroup gateway <<< $(grep pass vpn | cut -d: -f2) ``` ``` Connected to <vpn-server-ip-address>:443 SSL negotiation with <vpn-server-ip-address> Server certificate verify failed: signer not found Connected to HTTPS on <vpn-server-ip-address> with ciphersuite (TLS1.2)-(RSA)-(AES-256-GCM) Enter login credentials POST https://<vpn-server-ip-address>/ssl-vpn/login.esp GlobalProtect login returned authentication-source=<host-company>-LocalDB-ldap GlobalProtect login returned usually-equals-4=4 GlobalProtect login returned usually-equals-unknown=unknown POST https://<vpn-server-ip-address>/ssl-vpn/getconfig.esp Matching client config not found Creating SSL connection failed ``` I am new to openconnect and VPNs in general, can you guide me to what can be the cause of this problem, and how I can debug it. Notes - I don't have access to the server configuration - I can connect to the vpn using the same user on a MAC machine, using the GlobalProtect client.
issue