PFSense + SQUID + AD (Winbind)



  • Hi.
    I have problem in squid log.2.3.2-RELEASE-p1 (amd64)
    squid 0.4.32 for pfsense
    Date                                  IP                  Status                  Address          User          Назначение
    10.01.2017 18:51:17  172.16.4.12  TCP_TUNNEL/200  rs.mail.ru:443  admin  217.69.139.42
    10.01.2017 18:51:12  172.16.4.12  TCP_DENIED/407  rs.mail.ru:443  -  -
    10.01.2017 18:51:12  172.16.4.12  TCP_DENIED/407  rs.mail.ru:443  -  -

    auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -s HTTP/proxy.my.domen.ru@MU.DOMEN.RU
    auth_param negotiate children 50 startup=10 idle=5
    auth_param negotiate keep_alive off
    auth_param ntlm program /usr/local/libexec/squid/ntlm_auth –domain=my.domen.ru --helper-protocol=squid-2.5-ntlmssp
    auth_param ntlm children 20
    auth_param ntlm keep_alive off
    auth_param basic program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-basic
    auth_param basic children 20
    auth_param basic realm Please enter your credentials to access the proxy
    auth_param basic credentialsttl 5 minutes

    When i use ldap - i have not this problems.

    Please, prompt me where to look or where they can help to resolve it.

    Thnaks.


  • Banned

    Yeah, so use LDAP -> problem solved. If you invent your own authentication methods non-existent in the pfSense package, you'll need to pick up the pieces yourself.


Log in to reply