PFSense + SQUID + AD (Winbind)

[atyltin]

Hi.
I have problem in squid log.2.3.2-RELEASE-p1 (amd64)
squid 0.4.32 for pfsense
Date                                  IP                  Status                  Address          User          Назначение
10.01.2017 18:51:17  172.16.4.12  TCP_TUNNEL/200  rs.mail.ru:443  admin  217.69.139.42
10.01.2017 18:51:12  172.16.4.12  TCP_DENIED/407  rs.mail.ru:443  -  -
10.01.2017 18:51:12  172.16.4.12  TCP_DENIED/407  rs.mail.ru:443  -  -

auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -s HTTP/proxy.my.domen.ru@MU.DOMEN.RU
auth_param negotiate children 50 startup=10 idle=5
auth_param negotiate keep_alive off
auth_param ntlm program /usr/local/libexec/squid/ntlm_auth –domain=my.domen.ru --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20
auth_param ntlm keep_alive off
auth_param basic program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 20
auth_param basic realm Please enter your credentials to access the proxy
auth_param basic credentialsttl 5 minutes

When i use ldap - i have not this problems.

Please, prompt me where to look or where they can help to resolve it.

Thnaks.

[doktornotor]

Yeah, so use LDAP -> problem solved. If you invent your own authentication methods non-existent in the pfSense package, you'll need to pick up the pieces yourself.