<html><head></head><body><div><div>Hello</div><div><br></div><div>Yes that was my thread on severfault :)</div><div><br></div><div>I solve my problem by using LDAP authentication instead of Kerberos and everything is working like i was expected right now. I needed login/password form in browser what is not supported by kerberos authentication in squid.</div><div><br></div><div>//holo</div></div><div><br></div><div>On Sat, 2015-11-21 at 06:57 +0100, Natxo Asenjo wrote:</div><blockquote type="cite"><div dir="ltr">hi holo,<br><br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Nov 20, 2015 at 11:21 PM, holo <span dir="ltr"><<a href="mailto:holosian@gmail.com" target="_blank">holosian@gmail.com</a>></span> wrote:<br><blockquote type="cite"><div><div>Thank you for your reply. </div><div><br></div><div>I think i wasnt clear enough. Clients of proxy server are not kerberized. I want to just authenticate them for proxy use in kerberos DB when they are trying to use it (just by popup like in NTLM). Is such thing possible with kerberos? I saw on yt such thing wasa posible with AD.</div><span class=""><font color="#888888"><div><br></div><div>//holo</div></font></span></div><br></blockquote><div><br></div><div>did you ask this question in serverfault as well :-) ?<br><br><a href="http://serverfault.com/questions/737902/squid-kerberos-authentication-no-popup/737909#737909">http://serverfault.com/questions/737902/squid-kerberos-authentication-no-popup/737909#737909</a><br><br></div><div>If you require ntlm, then you should joing the squid host to an AD realm, I do not think this will work with freeipa because it does not do ntlm as far as I know.<br> <br></div></div><div class="gmail_signature">--<br>Groeten,<br>natxo</div>
</div></div>
<pre>--
Manage your subscription for the Freeipa-users mailing list:
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a>
Go to <a href="http://freeipa.org">http://freeipa.org</a> for more info on the project</pre></blockquote></body></html>