You don't really need to unless you use gssapi. Openconnect client or server 
only support spnego with gssapi and and if you needed that you should have 
restricted options via the auth gssapi parameter and krb5 config. It may be 
better to say what authentication you want to have on the server.

On February 14, 2018 7:03:09 AM UTC, Andrey Markovskiy <> 
>On 13.02.2018 13:04, Nikos Mavrogiannopoulos wrote:
>> On Mon, Feb 12, 2018 at 1:57 PM, Andrey Markovskiy
>> <> wrote:
>>> Hi, All!
>>> We've installed ocserv with pam auth and when user send wrong
>>> client get:
>>> "Server '' requested Basic authentication which is
>>> by default"
>>> We can set methods from client by command line option
>>> --http-auth=Negotiate,NTLM,Digest. How we can do it from server
>> To configure ocserv, I'd suggest to check:
>> regards,
>> Nikos
>I've read recipes but I didn't found any information related to my 
>I'll try to ask by different way: how to restrict http auth methods
>server side as we do it from client side (--http-auth=)?

Sent from my mobile. Please excuse my brevity.

openconnect-devel mailing list

Reply via email to