Hi,
I am testing OPNsense 16.1.2-amd64 in a lab environment since 2 days. I would like to test the integrated squid with Local database based authentification, but it seems squid doesn't accept my login/password ?
Here is what I have done under the webui configuration :
Proxy authentification configuration :
(http://img15.hostingpics.net/pics/966753Capture1.png) (http://www.hostingpics.net/viewer.php?id=966753Capture1.png)
I created a test user with "test" as password :
(http://img15.hostingpics.net/pics/726796Capture2.png) (http://www.hostingpics.net/viewer.php?id=726796Capture2.png)
I check that the login and the password are OK :
(http://img15.hostingpics.net/pics/815485Capture3.png) (http://www.hostingpics.net/viewer.php?id=815485Capture3.png)
But when I configure my browser (tested with both IE and Firefox) to use OPNSense as the proxy (192.168.1.254 on port 3128), the browser keep asking for the password :
(http://img15.hostingpics.net/pics/425587Capture4.png) (http://www.hostingpics.net/viewer.php?id=425587Capture4.png)
I even tried with the root login : still no luck. :(
Has someone an idea about what I did wrong please ?
Thanks by advance, and please excuse my english which is horrible.. :-[
Your auth settings look normal, maybe the local subnet for your network isn't allowed.
Can you check "Allow interface subnets" and "Proxy interfaces" in the general forward settings?
Hi,
Here is what you asked to me :
(http://img15.hostingpics.net/pics/595792Capture5.png) (http://www.hostingpics.net/viewer.php?id=595792Capture5.png)
My settings seems correct, but it doesn't work.
You problem probably is transparant mode, can you try to disable that?
AdSchellevis: thank you for trying to help me.
I had unchecked the Transparent proxy box, and then rebooted the FW, but same thing.. Firefox keep asking me for the login/password.
When I try this on a pfSense, everything is working well.
Am i missing something?
Up
does you local user has "user-proxy-auth" rule set?
For local users it checks for this role, but I think isn't described in the comments I guess.
Hi,
Where do I set this rule on my user please ? I cannot find what you're talking about in the WebUI .. :/
1) Go to System -> Access -> User
2) Edit your user
3) scroll down to "Effective Privileges" and add "user-proxy-auth"
You can also use groups and set this privilege on group level.
AdSchellevis, you're the best ! I was missing that part of the config needed, sorry, my mistake !
I can continue my tests, and I appreciate your help. Thank you very much ! :D