OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: BriceMac4Pro on June 28, 2017, 03:18:35 pm

Title: [SOLVED] Proxy Without Auth OKAY / With Auth NoWay
Post by: BriceMac4Pro on June 28, 2017, 03:18:35 pm
Hello i'm using OPNSense 17.1.8 and i'm trying to make Proxy working with Authentification.

There is no problem if i leave Authentication method  Blanck
But when i turn on Authentication method with my LDAP or with my Local Database, i restart Proxy Service and try to connect.

It ask me the login/password endlessly i can't navigate.
I got this kind of error in the log :
helperHandleRead: unexpected read from basicauthenticator #Hlpr1, 4 bytes 'ERR
helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 'ERR'

What can be wrong ?

Thank you.

EDIT : I've made a new OPNSense on another hardware same version 17.1.8 same problem with the same error log

EDIT : Here is the real logs :
2017/06/28 18:30:01 kid1| helperOpenServers: Starting 1/5 'auth-user.php' processes
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 'Fatal error: Uncaught Exception: Unable to open database: unable to open database file in /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php:95'


2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 'Stack trace:'

2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '#0
/usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php(95): SQLit
e3->__construct('/conf/vouchers_...')'
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '#1 /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php(171): OPNs
ense\Auth\Voucher->openDatabase()'
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '#2 /usr/local/opnsense/mvc/app/library/OPNsense/Auth/AuthenticationFactory.
php(135): OPNsense\Auth\Voucher->setProperties(Array)'
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '#3 /usr/local/etc/inc/plugins.inc.d/squid/auth-user.php(49): OPNsense\Auth\
AuthenticationFactory->get('Vaoucher')'
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '#4 {main}'
2017/06/28 18:30:01 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr1 '  thrown in /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php o
n line 95'
2017/06/28 18:30:01 kid1| WARNING: basicauthenticator #Hlpr1 exited
2017/06/28 18:30:01 kid1| Too few basicauthenticator processes are running (need 1/5)
2017/06/28 18:30:01 kid1| Starting new helpers
2017/06/28 18:30:01 kid1| helperOpenServers: Starting 1/5 'auth-user.php' processes
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 'Fatal error: Uncaught Exception: Unable to open database: unable to open da
tabase file in /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php:95'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 'Stack trace:'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '#0 /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php(95): SQLit
e3->__construct('/conf/vouchers_...')'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '#1 /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php(171): OPNs
ense\Auth\Voucher->openDatabase()'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '#2 /usr/local/opnsense/mvc/app/library/OPNsense/Auth/AuthenticationFactory.
php(135): OPNsense\Auth\Voucher->setProperties(Array)'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '#3 /usr/local/etc/inc/plugins.inc.d/squid/auth-user.php(49): OPNsense\Auth\
AuthenticationFactory->get('Vaoucher')'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '#4 {main}'
2017/06/28 18:30:02 kid1| helperHandleRead: unexpected reply on channel 0 from basicauthenticator #Hlpr2 '  thrown in /usr/local/opnsense/mvc/app/library/OPNsense/Auth/Voucher.php o
n line 95'


I went to /usr/local/opnsense/mvc/app/library/OPNsense/Auth/ and here is the permissions of Voucher.php
-rw-r--r--  1 root  wheel

I tried to put a 777 just for testing, rebooting... nothing better...
Title: Re: Proxy Without Auth OKAY / With Auth NoWay
Post by: BriceMac4Pro on July 02, 2017, 04:21:35 pm
UP Please,

Nobody is using Web Proxy with authentification with OPNsense 17.1.8 ?
Title: Re: Proxy Without Auth OKAY / With Auth NoWay
Post by: ninjax on July 16, 2017, 10:54:52 pm
Hi,

I have the same problem, do you find a solution ?

 :-[
Title: Re: Proxy Without Auth OKAY / With Auth NoWay
Post by: BriceMac4Pro on July 17, 2017, 05:15:33 pm
Yes i solved it.

You have to go into your users / groups.

Create a new group with name for exemple : Proxy User and OKAY.

Then modify this group and add an Assigned Privileges -> Proxy: Login

Then Okay, and put a user of your choice in this group.

You can start the proxy on and it will work but... The Voucher Server don't work. just Local Database or Radius or LDAP.