[Freeipa-users] How to verify user with proxy server

[郑磊]

Hi Petr,

I have already successfully verified the freeipa user's login process by using 3rd-party RADIUS server for otp auth type. But I have a question that if there is no single radius auth type for a freeipa user. In other words, the 3rd-pardy RADIUS server simply provides a way for otp auth type, which means they need to be used in combination,  because I have failed to use single radius auth type for a freeipa user by using 3rd-party RADIUS server. I don't know if I understand correctly.

Thanks!
 


------------------
祝：
    工作顺利！生活愉快！
--------------------------
长沙研发中心 郑磊 
电话：18684703229
邮箱：zhenglei at kylinos.cn
公司：天津麒麟信息技术有限公司
地址：湖南长沙市开福区三一大道工美大厦十四楼
 

 
 
 
------------------ Original ------------------
From:  "Petr Vobornik"<pvoborni at redhat.com>;
Date:  Tue, Nov 15, 2016 04:58 PM
To:  "郑磊"<zhenglei at kylinos.cn>; "freeipa-users"<freeipa-users at redhat.com>; 

Subject:  Re: [Freeipa-users] How to verify user with proxy server

 
On 11/15/2016 09:38 AM, 郑磊 wrote:
> Thanks for your reply. I may not have described clearly. My use case is that I 
> have a freeipa user that uses password auth type by default, and I want to use 
> radius auth tpye to verify user according to 3rd-party radius server.

FreeIPA is able to use 3rd-pardy RADIUS server for authentication.

This is covered in:
*
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/otp.html#migrating-proprietary-otp
* http://www.freeipa.org/page/V4/OTP

> 
> 
> 
> 
> 
> ------------------
> 祝：
>      工作顺利！生活愉快！
> --------------------------
> 长沙研发中心 郑磊
> 电话：18684703229
> 邮箱：zhenglei at kylinos.cn
> 公司：天津麒麟信息技术有限公司
> 地址：湖南长沙市开福区三一大道工美大厦十四楼
> ------------------ Original ------------------
> *From: * "Petr Vobornik"<pvoborni at redhat.com>;
> *Date: * Mon, Nov 14, 2016 07:08 PM
> *To: * "郑磊"<zhenglei at kylinos.cn>; "freeipa-users"<freeipa-users at redhat.com>;
> *Subject: * Re: [Freeipa-users] How to verify user with proxy server
> On 11/14/2016 04:09 AM, 郑磊 wrote:
>  > Hello everyone,
>  >
>  > I had already successfully verified user with otp. But I don't know how to
>  > verify user with proxy server, is there anyone know about it? There is no a
>  > complete solution on the website.
>  >
>  > Thanks!
>  >
> 
> Could you describe your use case in more details?
> 
> If you are asking about how to access IPA behind proxy, then checkout:
>    https://www.adelton.com/freeipa/freeipa-behind-proxy-with-different-name
> https://www.adelton.com/freeipa/freeipa-behind-ssl-proxy
> 
> Or other proxy threads on this list.
> -- 
> Petr Vobornik
> 


-- 
Petr Vobornik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161117/aa88fa35/attachment.htm>