Topics

1

17.1 Legacy Series / Access Servers - Groups Scope Remote

« on: July 21, 2017, 10:17:53 pm »

I have a LDAP(Active directory) and Radius(NPS) configured on my OPNsense 17.1.10-amd64.

On System -> Access -> Tester i receive an "authenticated sucessfully".
But I don't receive any groups on any test, Radius and LDAP.

- I have a group on AD and I'm on it
- I have a group configured on OPNSense configured with the exactly same name of ActiveDirectory Group.
- On Radius(NPS) I added the "Class" attribute to be delivered on the police matching with my group, and the string is exactly the same of the group name on OPNSense.
- I Tried tests using "administrator" of my domain on DN of LDAP server configuration...

Looks like OPN System is ignoring the groups that Radius and LDAP are telling him.
The behavior is the same 

For the records:
I'm doing some efforts to migrate from PFSense to OPNSense on several sites.
So I have two VMs to do the comparison "PF vs OPN", and any thing that is needed is equivalent to both servers.

And the Groups are working as expected on PFsense.

Any Suggestions?

2

17.1 Legacy Series / Web Proxy Bind squid to Wan Interface

« on: July 19, 2017, 02:49:29 am »

I'm Trying to use OPNsense 17.1.10-amd64 as a simple WebProxy.
And I´m not being able to activate Web Proxy(Squid) on the Wan Interface.

This box is not the Firewall of the network, and it must not have two interfaces.
My intent is to replace a Squid server.

I thought to enable a dummy interface on it, enable Web Proxy on it, an do a Port foward to it.
But i'm not able to create some Loopback or some like that...

Any suggestions?

P.S.: I'm recently coming from pfsense, so I'm still skating on thin ice...

--
Douglas Fischer