diff --git a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.pre_auth.conf b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.pre_auth.conf new file mode 100644 index 000000000..98b50271e --- /dev/null +++ b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/Proxy/squid.user.pre_auth.conf @@ -0,0 +1,13 @@ +{% if helpers.exists('OPNsense.proxy.forward.authentication.method') %} +{% if helpers.exists('system.authserver') %} +{% for server in helpers.toList('system.authserver') %} +{% if server.name == OPNsense.proxy.forward.authentication.method %} +{% if server.type == "ssoproxyad" %} +auth_param negotiate program "/usr/local/libexec/squid/negotiate_kerberos_auth" +auth_param negotiate children 10 +auth_param negotiate keep_alive on +{% endif %} +{% endif %} +{% endfor %} +{% endif %} +{% endif %} diff --git a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/+TARGETS b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/+TARGETS index 3d6b20d59..3b611d3c3 100644 --- a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/+TARGETS +++ b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/+TARGETS @@ -1 +1,2 @@ krb5.conf:/usr/local/etc/ssoproxyad/krb5.conf +rc.conf:/usr/local/etc/rc.d/ssoproxyad.conf diff --git a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/rc.conf b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/rc.conf new file mode 100644 index 000000000..73fb8c90c --- /dev/null +++ b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/SSOProxyAD/rc.conf @@ -0,0 +1,12 @@ +{% if helpers.exists('system.authserver') %} +{% for server in helpers.toList('system.authserver') %} +{% if helpers.exists(OPNsense.proxy.forward.authentication.method) %} +{% if server.name == OPNsense.proxy.forward.authentication.method %} +{% if server.type == "ssoproxyad" %} +squid_krb5_ktname="/usr/local/etc/ssoproxyad/PROXY.keytab" +{% endif %} +{% endif %} +{% endif %} +{% endif %} +{% endfor %} +{% endif %}