proxy username and group issue

[Xajh DFBB]

Hi, Everyone

Just a trial on OPNSense proxy,OPNsense 19.1.6-amd64 FreeBSD 11.2-RELEASE-p9-HBSD OpenSSL 1.0.2r 26 Feb 2019
I found the following issues this morning:
1. username has to be lowercase: I tested usernames like "new1, NEW2, New9", within the Tester, all fine, but once via proxy authentication, only "new1" work, "NEW2, New9" won't work, appear on system log"May 2 11:54:45   squid: user 'new2' could not authenticate.", all logs with username are lowercase, not as real username.

2. New proxy users won't pass authentication unless restart proxy services: Create few users and joined existing proxy group, won't pass authentication, after restart proxy services, works fine (only lowercase users).

3.Create a new user and join existing Proxy Group from user window, had error log like: May 2 11:33:24   opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007,2008'' returned exit code '67', the output was 'pw: user `2008' does not exist'
May 2 11:33:02   opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006,2007'' returned exit code '67', the output was 'pw: user `2007' does not exist'
May 2 11:32:33   opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005,2006'' returned exit code '67', the output was 'pw: user `2006' does not exist'
May 2 11:32:06   opnsense: /system_usermanager.php: The command '/usr/sbin/pw 'groupmod' 'WebAccGrp' -g '2000' -M '2001,2002,2003,2004,2005'' returned exit code '67', the output was 'pw: user `2005' does not exist'

Only create users first , then from user group window add users is fine.

I don't know is this normal or not as I am new to OPNSense, also is there any way to analysis proxy users, i.e , how many users/sessions online, how long online, which sites are accessing etc

Thanks for any info in advance.

[cristian_asir]

Hi,

I'm new on OPNsense too, and I configured my proxy on transparent mode and no transparent mode (ACLs for each user).

I have documentation about it, so if you have this problem, I can send you this PDF.


Cheers,

Cristian.