PFSense + SQUID + AD (Winbind)
-
Hi.
I have problem in squid log.2.3.2-RELEASE-p1 (amd64)
squid 0.4.32 for pfsense
Date IP Status Address User Назначение
10.01.2017 18:51:17 172.16.4.12 TCP_TUNNEL/200 rs.mail.ru:443 admin 217.69.139.42
10.01.2017 18:51:12 172.16.4.12 TCP_DENIED/407 rs.mail.ru:443 - -
10.01.2017 18:51:12 172.16.4.12 TCP_DENIED/407 rs.mail.ru:443 - -auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -s HTTP/proxy.my.domen.ru@MU.DOMEN.RU
auth_param negotiate children 50 startup=10 idle=5
auth_param negotiate keep_alive off
auth_param ntlm program /usr/local/libexec/squid/ntlm_auth –domain=my.domen.ru --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20
auth_param ntlm keep_alive off
auth_param basic program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 20
auth_param basic realm Please enter your credentials to access the proxy
auth_param basic credentialsttl 5 minutesWhen i use ldap - i have not this problems.
Please, prompt me where to look or where they can help to resolve it.
Thnaks.
-
Yeah, so use LDAP -> problem solved. If you invent your own authentication methods non-existent in the pfSense package, you'll need to pick up the pieces yourself.