SquidGuard 1.16.18_15 does't filter content in mixed auth mode
-
I authenticate proxy user (squid) against LDAP, and due to LDAP channel binding, I have to use SSL LDAP auth. Since SquidGuard doesn't support SSL LDAP auth, I used "mixed authentication mode". It means Groups ACL use simple 'username' string (that match with LDAP username) to apply filtering.
That was working properly in 1.16.18_6. But SquidGuard 1.16.18_15 now just allow everything, even deny category in ACL. Any fix possible ? Or how to downgrade to 1.16.18_6 ?
-
@czvacko Tried update to 1.16.18_17 but my issue persist. SquidGuard still allow everything...
-
@czvacko Please show your SquidGuard configration (WebGUI pages) +
/usr/local/etc/squidGuard/squidGuard.conf -
@viktor_g said in SquidGuard 1.16.18_15 does't filter content in mixed auth mode:
/usr/local/etc/squidGuard/squidGuard.conf
Requested information are in attachment.
Config.zip
User names are anonymized, I'm user 'john_doe' authenticated like this by LDAP - so I can connect Squid. Same user name used for squidGuard / Group ACL - that worked in previous version.Now,
-
when 'john_doe' exist in Allow_youtu_face, everything is allowed, even "deny" URL from group ACL / common ACL.
-
when 'john_doe' NOT exist in any group (so he should follow common ACL) nothing works.
-
-
@czvacko Please update to the latest version of SquidGuard pkg
-
@czvacko Boa noite, resolvi meu problema configurando uma linha no squid.
vou postar a linha abaixo
url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;url_rewrite_bypass off;url_rewrite_children 16 startup=8 idle=4 concurrency=0
caminho para verificar a linha:
services/ squid proxy server / show advanced options -
@viktor_g Updated, category filtering now works well.
But still there is something broken:
In the past, when I add/remove user from group ACL, it was enough just press Save&Apply.
But now I have to restart SquidGuard service to apply new membership.