OPNsense Forum

Archive => 16.1 Legacy Series => Topic started by: coom on February 09, 2016, 11:11:07 pm

Title: [SOLVED] Proxy authentification problem
Post by: coom on February 09, 2016, 11:11:07 pm

Hi,

I am testing OPNsense 16.1.2-amd64 in a lab environment since 2 days. I would like to test the integrated squid with Local database based authentification, but it seems squid doesn't accept my login/password ?

Here is what I have done under the webui configuration :

Proxy authentification configuration :
(http://img15.hostingpics.net/pics/966753Capture1.png) (http://www.hostingpics.net/viewer.php?id=966753Capture1.png)

I created a test user with "test" as password :
(http://img15.hostingpics.net/pics/726796Capture2.png) (http://www.hostingpics.net/viewer.php?id=726796Capture2.png)

I check that the login and the password are OK :
(http://img15.hostingpics.net/pics/815485Capture3.png) (http://www.hostingpics.net/viewer.php?id=815485Capture3.png)

But when I configure my browser (tested with both IE and Firefox) to use OPNSense as the proxy (192.168.1.254 on port 3128), the browser keep asking for the password :

(http://img15.hostingpics.net/pics/425587Capture4.png) (http://www.hostingpics.net/viewer.php?id=425587Capture4.png)

I even tried with the root login : still no luck.  :(

Has someone an idea about what I did wrong please ?

Thanks by advance, and please excuse my english which is horrible..  :-[

Title: Re: Proxy authentification problem
Post by: AdSchellevis on February 10, 2016, 10:41:06 am

Your auth settings look normal, maybe the local subnet for your network isn't allowed.
Can you check "Allow interface subnets" and "Proxy interfaces" in the general forward settings?

Title: Re: Proxy authentification problem
Post by: coom on February 10, 2016, 11:13:04 am

Hi,

Here is what you asked to me :

(http://img15.hostingpics.net/pics/595792Capture5.png) (http://www.hostingpics.net/viewer.php?id=595792Capture5.png)

My settings seems correct, but it doesn't work.

Title: Re: Proxy authentification problem
Post by: AdSchellevis on February 10, 2016, 11:14:18 am

You problem probably is transparant mode, can you try to disable that?

Title: Re: Proxy authentification problem
Post by: coom on February 10, 2016, 11:37:57 am

AdSchellevis: thank you for trying to help me.

I had unchecked the Transparent proxy box, and then rebooted the FW, but same thing.. Firefox keep asking me for the login/password.

When I try this on a pfSense, everything is working well.

Am i missing something?

Title: Re: Proxy authentification problem
Post by: sagem2004 on February 10, 2016, 11:49:52 am

Up

Title: Re: Proxy authentification problem
Post by: AdSchellevis on February 10, 2016, 01:36:33 pm

does you local user has "user-proxy-auth" rule set?
For local users it checks for this role, but I think isn't described in the comments I guess.

Title: Re: Proxy authentification problem
Post by: coom on February 11, 2016, 01:39:18 pm

Hi,

Where do I set this rule on my user please ? I cannot find what you're talking about in the WebUI .. :/

Title: Re: Proxy authentification problem
Post by: AdSchellevis on February 11, 2016, 01:41:08 pm

1) Go to System -> Access -> User
2) Edit your user
3) scroll down to "Effective Privileges" and add "user-proxy-auth"

You can also use groups and set this privilege on group level.

Title: Re: Proxy authentification problem
Post by: coom on February 11, 2016, 01:51:55 pm

AdSchellevis, you're the best ! I was missing that part of the config needed, sorry, my mistake !

I can continue my tests, and I appreciate your help. Thank you very much !  :D