Show Posts
1
Web Proxy Filtering and Caching / proxy username and group issue
« on: May 02, 2019, 06:36:23 am »
Hi, Everyone
Just a trial on OPNSense proxy,OPNsense 19.1.6-amd64 FreeBSD 11.2-RELEASE-p9-HBSD OpenSSL 1.0.2r 26 Feb 2019
I found the following issues this morning:
1. username has to be lowercase: I tested usernames like "new1, NEW2, New9", within the Tester, all fine, but once via proxy authentication, only "new1" work, "NEW2, New9" won't work, appear on system log"May 2 11:54:45 squid: user 'new2' could not authenticate.", all logs with username are lowercase, not as real username.
2. New proxy users won't pass authentication unless restart proxy services: Create few users and joined existing proxy group, won't pass authentication, after restart proxy services, works fine (only lowercase users).
3.Create a new user and join existing Proxy Group from user window, had error log like: May 2 11:33:24 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007,2008'' returned exit code '67', the output was 'pw: user `2008' does not exist'
May 2 11:33:02 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007'' returned exit code '67', the output was 'pw: user `2007' does not exist'
May 2 11:32:33 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006'' returned exit code '67', the output was 'pw: user `2006' does not exist'
May 2 11:32:06 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005'' returned exit code '67', the output was 'pw: user `2005' does not exist'
Only create users first , then from user group window add users is fine.
I don't know is this normal or not as I am new to OPNSense, also is there any way to analysis proxy users, i.e , how many users/sessions online, how long online, which sites are accessing etc
Thanks for any info in advance.
Just a trial on OPNSense proxy,OPNsense 19.1.6-amd64 FreeBSD 11.2-RELEASE-p9-HBSD OpenSSL 1.0.2r 26 Feb 2019
I found the following issues this morning:
1. username has to be lowercase: I tested usernames like "new1, NEW2, New9", within the Tester, all fine, but once via proxy authentication, only "new1" work, "NEW2, New9" won't work, appear on system log"May 2 11:54:45 squid: user 'new2' could not authenticate.", all logs with username are lowercase, not as real username.
2. New proxy users won't pass authentication unless restart proxy services: Create few users and joined existing proxy group, won't pass authentication, after restart proxy services, works fine (only lowercase users).
3.Create a new user and join existing Proxy Group from user window, had error log like: May 2 11:33:24 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007,2008'' returned exit code '67', the output was 'pw: user `2008' does not exist'
May 2 11:33:02 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007'' returned exit code '67', the output was 'pw: user `2007' does not exist'
May 2 11:32:33 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006'' returned exit code '67', the output was 'pw: user `2006' does not exist'
May 2 11:32:06 opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005'' returned exit code '67', the output was 'pw: user `2005' does not exist'
Only create users first , then from user group window add users is fine.
I don't know is this normal or not as I am new to OPNSense, also is there any way to analysis proxy users, i.e , how many users/sessions online, how long online, which sites are accessing etc
Thanks for any info in advance.