Hi Petr,<br><br>I have already successfully verified the freeipa user's login process by using 3rd-party RADIUS server for otp auth type. But I have a question that if there is no single radius auth type for a freeipa user. In other words, the 3rd-pardy RADIUS server simply provides a way for otp auth type, which means they need to be used in combination, because I have failed to use single radius auth type for a freeipa user by using 3rd-party RADIUS server. I don't know if I understand correctly.<br><br>Thanks!<br> <div><sign signid="0"><div style="color:#909090;font-family:Arial Narrow;font-size:12px"><br><br><br>------------------</div><div style="font-size:14px;font-family:Verdana;color:#000;">祝：<br> 工作顺利！生活愉快！<br><span style="text-decoration: underline;"></span>--------------------------<br>长沙研发中心郑磊 <br>电话：18684703229<br>邮箱：zhenglei@kylinos.cn<br>公司：天津麒麟信息技术有限公司<br>地址：湖南长沙市开福区三一大道工美大厦十四楼<br> </div></sign></div><div> </div><div><includetail><div> </div><div> </div><div style="font:Verdana normal 14px;color:#000;"><div style="FONT-SIZE: 12px;FONT-FAMILY: Arial Narrow;padding:2px 0 2px 0;">------------------ Original ------------------</div><div style="FONT-SIZE: 12px;background:#efefef;padding:8px;"><div id="menu_sender"><b>From: </b> "Petr Vobornik"<pvoborni@redhat.com>;</div><div><b>Date: </b> Tue, Nov 15, 2016 04:58 PM</div><div><b>To: </b> "郑磊"<zhenglei@kylinos.cn>; "freeipa-users"<freeipa-users@redhat.com>; <wbr></div><div></div><div><b>Subject: </b> Re: [Freeipa-users] How to verify user with proxy server</div></div><div> </div>On 11/15/2016 09:38 AM, 郑磊 wrote:<br>> Thanks for your reply. I may not have described clearly. My use case is that I <br>> have a freeipa user that uses password auth type by default, and I want to use <br>> radius auth tpye to verify user according to 3rd-party radius server.<br><br>FreeIPA is able to use 3rd-pardy RADIUS server for authentication.<br><br>This is covered in:<br>*<br>https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/otp.html#migrating-proprietary-otp<br>* http://www.freeipa.org/page/V4/OTP<br><br>> <br>> <br>> <br>> <br>> <br>> ------------------<br>> 祝：<br>> 工作顺利！生活愉快！<br>> --------------------------<br>> 长沙研发中心郑磊<br>> 电话：18684703229<br>> 邮箱：zhenglei@kylinos.cn<br>> 公司：天津麒麟信息技术有限公司<br>> 地址：湖南长沙市开福区三一大道工美大厦十四楼<br>> ------------------ Original ------------------<br>> *From: * "Petr Vobornik"<pvoborni@redhat.com>;<br>> *Date: * Mon, Nov 14, 2016 07:08 PM<br>> *To: * "郑磊"<zhenglei@kylinos.cn>; "freeipa-users"<freeipa-users@redhat.com>;<br>> *Subject: * Re: [Freeipa-users] How to verify user with proxy server<br>> On 11/14/2016 04:09 AM, 郑磊 wrote:<br>> > Hello everyone,<br>> ><br>> > I had already successfully verified user with otp. But I don't know how to<br>> > verify user with proxy server, is there anyone know about it? There is no a<br>> > complete solution on the website.<br>> ><br>> > Thanks!<br>> ><br>> <br>> Could you describe your use case in more details?<br>> <br>> If you are asking about how to access IPA behind proxy, then checkout:<br>> https://www.adelton.com/freeipa/freeipa-behind-proxy-with-different-name<br>> https://www.adelton.com/freeipa/freeipa-behind-ssl-proxy<br>> <br>> Or other proxy threads on this list.<br>> -- <br>> Petr Vobornik<br>> <br><br><br>-- <br>Petr Vobornik</div></includetail></div>