<div dir="ltr">Hi Adrian,<div><br><div>You can use basic_ldap_auth to connect to FreeIPA using LDAP instead of negotiate_kerberos_auth :<div><div>                                                                            </div><div>auth_param basic program /usr/lib/squid3/basic_ldap_auth -R \                   </div><div>    -b "cn=accounts,dc=example,dc=com" \                                          </div><div>    -f uid=%s -h <freeipa-server> -ZZ                           </div><div>auth_param basic children 10                                                    </div><div>auth_param basic realm infra.msv                                                </div><div>auth_param basic credentialsttl 30 second                                       </div><div>                                                                                 </div></div><div>Regards,</div></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><font face="arial, helvetica, sans-serif"><div><span style="font-family:arial"><font face="arial, helvetica, sans-serif"><div>--</div><div><font color="#666666">Youenn Piolet</font></div><div><font size="1" color="#999999"><a href="mailto:piolet.y@gmail.com" target="_blank">piolet.y@gmail.com</a></font></div><div style="font-size:large"><span style="font-size:small"><span style="font-family:arial"><div><font face="tahoma, sans-serif"><span style="font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><span style="font-family:tahoma,sans-serif;font-size:small"><font color="#666666"><span style="color:rgb(142,142,142);font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><em><br></em></span></font></span></span></font></div><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span></div></font></span></div></font></div></div>
<br><div class="gmail_quote">2016-12-21 17:53 GMT+01:00 Ing. Adrian Hernández Yeja <span dir="ltr"><<a href="mailto:ayeja@uci.cu" target="_blank">ayeja@uci.cu</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi folks, I need authenticate my users against a squid proxy server using FreeIPA. I know is possible (<a href="https://www.freeipa.org/page/Squid_Integration_with_FreeIPA_using_Single_Sign_On" rel="noreferrer" target="_blank">https://www.freeipa.org/page/<wbr>Squid_Integration_with_<wbr>FreeIPA_using_Single_Sign_On</a>) but my users are not necessarily authenticated in a FreeIPA domain, so my question is if it's possible to allow this requirement either a third application or a specific configuration.<br>
<br>
Regards.<br>
<br>
La @universidad_uci es Fidel. Los jóvenes no fallaremos.<br>
#HastaSiempreComandante<br>
#HastalaVictoriaSiempre<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Manage your subscription for the Freeipa-users mailing list:<br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/<wbr>mailman/listinfo/freeipa-users</a><br>
Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project</font></span></blockquote></div><br></div>