---
title: Proxy and GUI Authentication with Auth-Service
slug: kronpam-how-to-guides/proxy-and-gui-authentication-with-auth-service
description: Learn how to configure LDAP user authentication with Kron PAM GUI using this concise document. It offers step-by-step instructions for setting up Netright-Tomcat, SSH Proxy, SFTP Proxy, and HTTP Proxy for auth-service. Discover the specific configuration 
docTags: 
createdAt: 2022-08-17T12:07:50.000Z
---

The initial Kron PAM installation includes the TACACS+ configuration. If there is a need for LDAP user authentication with the Kron PAM GUI, LDAP needs to be configured on the TACACS+ Management page. 

To use auth-service instead, add LDAP configurations on the LDAP Manager page, as described in [Quick LDAP/AD Integration](docId\:HwQWiBdzNUKefynjzlWIS). 

Configuring Netright-Tomcat for Auth-Service


For Tomcat configuration:

1. Open and edit the file** /u01/netright-tomcat/netright/netright.properties**. Change the line below and add a new property as follows:

| netright.auth.tacacs=true<br />**change to:**<br />netright.auth.tacacs=false<br />**add parameters:**<br />netright.auth.auth-service=true<br />netright.auth.auth-service.base.url=http\://127.0.0.1:8087 |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

- Restart the Netright-Tomcat service with the following command: Systemctl restart netright-tomcat

:::hint{type="danger"}
If you receive the ERROR AuthService:109 error in the Catalina log, It means that the auth-service is not up and running.

- ERROR AuthService:109 - An exception occurred. Details: I/O error on POST request for "http\://127.0.0.1:8087/authenticate/aioc": Connect to 127.0.0.1:8087 \[/127.0.0.1] failed: Connection refused (Connection refused); nested exception is org.apache.http.conn.HttpHostConnectException: Connect to 127.0.0.1:8087 \[/127.0.0.1] failed: Connection refused (Connection refused)
:::


Configuring SSH Proxy for Auth-Service
======================================

For SSH proxy configuration:

1. Open and edit the file **/u01/nssoapp/conf/nsso.properties**. Change the line below and add a new property as follows: 

| nsso.auth.type=tacacs<br />**change to:**<br />nsso.auth.type=auth-service<br />**add parameter:**<br />nsso.authservice.server=http\://127.0.0.1:8087 |
| ------------------------------------------------------------------------------------------------------------------------------------------------------ |

- &#x20;Restart the SSH proxy service with the following command line: *Systemctl restart nssoapp*


# Configuring SFTP Proxy for Auth-Service

For SSH proxy configuration:

1. Open and edit the file, **/u01/sftp-proxy/conf/nsso.properties**. Change the line below and add a new property as follows:

| nsso.auth.type=tacacs<br />**change to:**<br />nsso.auth.type=auth-service<br />**add parameter:**<br />nsso.authservice.server=http\://127.0.0.1:8087 |
| ------------------------------------------------------------------------------------------------------------------------------------------------------ |

- Restart the SFTP proxy service with the following command line: *Systemctl restart sftp\_prox*



# Configuring HTTP Proxy for Auth-Service

For HTTP proxy configuration:

1. Open and edit the file **/u01/http-proxy/conf/ http\_proxy.properties**. Change the line below and add a new property as follows:

| http.proxy.auth.type=tacacs<br />**change to:**<br />http.proxy.auth.type=auth-service<br />**add parameter:**<br />nsso.authservice.server=http\://127.0.0.1:8087  |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

- Restart the sftp proxy service: Systemctl restart http\_prox