Want to configure Proxy server: Authentication



  • Dear Experts,
    I wanted to configure Authotication between my Domain Controller and my PFSENSE. As of right now I am using IP address of my all AD users in Pfsense in Proxy filter SquidGuard: Groups Access Control List. I want to uses either the entire group of AD or the Users Name insted of IP address, can some one help me out.

    Regards,
    Prashant Chauhan



  • Look for squid ldap authentication how to on this forum or at docs.pfsense.org



  • @marcelloc:

    Look for squid ldap authentication how to on this forum or at docs.pfsense.org

    I had tried by going through but it did not worked, can some one give me with a small example or screen shot for configuring it Proxy server with my Active Directory

    Thanks for your reply



  • I didn't configure that in the past but
    Services -> Proxy Server -> Auth Settings

    And then choose ActiveDirectory and fill out the fields.



  • @Nachtfalke:

    I didn't configure that in the past but
    Services -> Proxy Server -> Auth Settings

    And then choose ActiveDirectory and fill out the fields.

    Sir, I had gone through that path
    What has to be filed and how can you explain in clear words will be really helpful for me, as i had tried it but did not worked out for me

    LDAP version (which version to select)
    Authentication server (Will it be my PDC ip address of CDC ip Address)
    Authentication server port (LDAP port)
    NT domain (?)
    LDAP server user DN (?)
    LDAP password (will it be PDC or CDC administrator password?)
    LDAP base domain (?)
    LDAP username DN attribute (?)
    LDAP search filter (?)
    RADIUS secret (i do not have Radius)
    Secondary NT servers (will it be my cdc)
    Authentication prompt (?)
    Authentication processes (?)
    Authentication TTL (?)

    Please guide on abouve quiries will be thank full



  • Sorry, I don't want to be unfriendly. Just want to make sure we are talking about the same config menu ;o)

    As I said above I didn't use that in the past but perhaps this thread will help you:
    http://forum.pfsense.org/index.php?topic=11153.0
    http://forum.pfsense.org/index.php/topic,2004.0.html
    http://forum.pfsense.org/index.php/topic,41501.0.html


Locked