[SOLVED] Proxy authentification problem

[coom]

Hi,

I am testing OPNsense 16.1.2-amd64 in a lab environment since 2 days. I would like to test the integrated squid with Local database based authentification, but it seems squid doesn't accept my login/password ?

Here is what I have done under the webui configuration :

Proxy authentification configuration :


I created a test user with "test" as password :


I check that the login and the password are OK :


But when I configure my browser (tested with both IE and Firefox) to use OPNSense as the proxy (192.168.1.254 on port 3128), the browser keep asking for the password :



I even tried with the root login : still no luck.  :(

Has someone an idea about what I did wrong please ?

Thanks by advance, and please excuse my english which is horrible..  :-[

[AdSchellevis]

Your auth settings look normal, maybe the local subnet for your network isn't allowed.
Can you check "Allow interface subnets" and "Proxy interfaces" in the general forward settings?

[coom]

Hi,

Here is what you asked to me :



My settings seems correct, but it doesn't work.

[AdSchellevis]

You problem probably is transparant mode, can you try to disable that?

[coom]

AdSchellevis: thank you for trying to help me.

I had unchecked the Transparent proxy box, and then rebooted the FW, but same thing.. Firefox keep asking me for the login/password.

When I try this on a pfSense, everything is working well.

Am i missing something?

[sagem2004]

Up

[AdSchellevis]

does you local user has "user-proxy-auth" rule set?
For local users it checks for this role, but I think isn't described in the comments I guess.

[coom]

Hi,

Where do I set this rule on my user please ? I cannot find what you're talking about in the WebUI .. :/

[AdSchellevis]

1) Go to System -> Access -> User
2) Edit your user
3) scroll down to "Effective Privileges" and add "user-proxy-auth"

You can also use groups and set this privilege on group level.

[coom]

AdSchellevis, you're the best ! I was missing that part of the config needed, sorry, my mistake !

I can continue my tests, and I appreciate your help. Thank you very much !  :D