<html><head></head><body><div>Thank you for your reply. </div><div><br></div><div>I think i wasnt clear enough. Clients of proxy server are not kerberized. I want to just authenticate them for proxy use in kerberos DB when they are trying to use it (just by popup like in NTLM). Is such thing possible with kerberos? I saw on yt such thing wasa posible with AD.</div><div><br></div><div>//holo</div><div><br></div><div>On Fri, 2015-11-20 at 17:11 -0430, Loris Santamaria wrote:</div><blockquote type="cite"><div>El vie, 20-11-2015 a las 22:24 +0100, holo escribió:</div><blockquote type="cite"><div>Hello</div><div><br></div><div>I configured Squid to use kerberos authentication according to that howto: <a href="http://www.freeipa.org/page/Squid_Integration_with_FreeIPA_using_Single_Sign_On">http://www.freeipa.org/page/Squid_Integration_with_FreeIPA_using_Single_Sign_On</a> but I'm not getting any popup when im trying to use proxy, instead I'm just getting information that I'm not authenticated.</div><div><br></div><div>Anyone is using FreeIPA in such configuration?</div></blockquote><div><br></div><div>Yes and it works perfectly. </div><div><br></div><div>First check the basic stuff: the pc accessing squid should be part of the ipa domain or a trusted domain, the browser should be configured to access squid by its full name (accessing by IP won't work), browser must support negotiate auth, client and server clocks must be in sync.</div><div><br></div><div>If everything seems ok, restart squid, try connection from a client, and check for any error messages in squid's cache.log file</div><div><br></div><div>Best regards</div><div><br></div><blockquote type="cite"><pre>--
Manage your subscription for the Freeipa-users mailing list:
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a>
Go to <a href="http://freeipa.org">http://freeipa.org</a> for more info on the project</pre></blockquote><div class="-x-evo-signature-wrapper"><span><pre>--
Loris Santamaria linux user #70506 xmpp:loris@lgs.com.ve
Links Global Services, C.A. http://www.lgs.com.ve
Tel: 0286 952.06.87 Cel: 0414 095.00.10 sip:103@lgs.com.ve
------------------------------------------------------------
"If I'd asked my customers what they wanted, they'd have said
a faster horse" - Henry Ford
</pre></span></div><pre>--
Manage your subscription for the Freeipa-users mailing list:
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a>
Go to <a href="http://freeipa.org">http://freeipa.org</a> for more info on the project</pre></blockquote></body></html>