OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Profile of HughJazz84 »
  • Show Posts »
  • Messages
  • Profile Info
    • Summary
    • Show Stats
    • Show Posts...
      • Messages
      • Topics
      • Attachments

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

  • Messages
  • Topics
  • Attachments

Messages - HughJazz84

Pages: [1]
1
Web Proxy Filtering and Caching / where is the console menu choice written?
« on: April 30, 2019, 05:20:15 pm »
i changed the console type to "no console"  and now its freezing on boot. 

i can use emergency rescue cd to boot and mount the drive. 
Where is the console choice written and boot from?

so, which config file can I manualy edit to switch it back to EFI Console?  or what choices do i need to make?

I need to recover this drive....

2
Web Proxy Filtering and Caching / Re: web Proxy sso
« on: April 30, 2019, 02:29:06 pm »
christian:  once i get it working, i would be happy to.  right now, I dont have it working so I need to focus on my system.

Hugh

3
Web Proxy Filtering and Caching / Re: web Proxy sso
« on: April 30, 2019, 02:04:45 pm »
i am using FQDN in the wpad file, i also tried manually configuring it with the FQDN and got the same result.

What is the best way to debug the KERB auth exchange?

Hugh

4
Web Proxy Filtering and Caching / web Proxy sso
« on: April 30, 2019, 12:53:48 am »
hey all,

so i have the webproxy sso plugin installer, configured and it passes all chks and seems to work, when I test the kerberos login i get

Password for hxxxx@INTERNAL.EXAMPLE.CA:
AF oRQwEqADCgEAoQsasdfSqGSIb3EgECAg== hxxx@INTERNAL.EXAMPLE.CA
BH quit command

so it seems to be working.... but when I try to use the web browser, it downloads the wpad.dat file and then asks for authentication.

cache.log has many examples of
ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: received type 1 NTLM token; }}

how can I debug the kerberos authentication and ensure that kerberos auth and not ntlm are being processed.

I think im close, but i cant for the life of me get this last step...

Thanks in advance

Hugh

Pages: [1]
OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2