NTLM SSO Plugin

[ricardo.claus]

Gentlemen,
I am testing version 17.7.
Can anyone tell me if Opensense already has an SSO plugin for Squid to authenticate to AD through NTLM connection?

[franco]

Hi there,

There is a plugin in testing, we're currently trying to repair it. The maintainer worked on it over a year ago but it was never finished.

You can basically install the plugin via command line:

# pkg install os-web-proxy-sso

The update with 17.7.1 will have a few fixes of currently know issues. Right now we are trying to figure out how to replace the key file because we switched the Kerberos library and the old way is not compatible anymore.

See this thread for more info...

https://forum.opnsense.org/index.php?topic=3804.0


Cheers,
Franco

[crazywolf13]

Hi France

Have we got any news yet regarding SSO?

[franco]

Well, web-proxy-sso is still available, but I doubt there are many users nowadays.


Cheers,
Franco

[crazywolf13]

Thanks for the quick reply!

I see.

Due to me using authentik and authentik stating kerberos is incompatible that then probably won't help me much.
https://docs.goauthentik.io/integrations/services/sssd/

So there is currently no OIDC or similar SSO solution possible in opnsense?