Transparent Proxy + Active Directory

[Enrique Fernandez]

Hi.

I've configured integration with Active Directory (Windows 2003) following manual:

https://docs.diladele.com/administrator_guide_stable/active_directory/index.html

Link to Active Directory domain and Kerberos auth seems working fine, if I configure Proxy Settings on Windows Internet Settings, I can access to any web and I can see the user on Real Time traffic.

The problem is when I use Transparent Proxy without Proxy Settings on Windows Internet Settings. When I access an any url I can see the error:

ERR_UNEXPECTED_PROXY_AUTH

Thanks in advance.

Best regards.

[rafael....@diladele.com]

Unfortunately proxy authentication is not possible in transparent mode - please look at https://docs.diladele.com/faq/squid/authentication/transparent_authentication.html to understand why.

[Enrique Fernandez]

ah ok, I had not seen that entry.

Thanks!

[Enrique Fernandez]

Hi.

About this... Can I make the computers that were joining the domain use authentication with proxy settings in the browser and those that are not from the domain use transparent proxy at the same time?

Thanks!!.

[rafael....@diladele.com]

Somewhat yes - please see https://docs.diladele.com/faq/squid/authentication/mix_authenticated_and_non_authenticated_proxy_groups.html

[Enrique Fernandez]

Amazing!! I'm going to try this option.

Thank you for your quick answer!!.

[Enrique Fernandez]

Hi.

I do not know if I have understood it well.

In step 3: Exclude given server subnet from authentication in UI / Squid / Exclusions / by Authentication. This allows connections from the server subnet to the proxy to be non-authenticated.

Do I add a test ip like this?

In step 4: Add the server subnet to the UI / Web Filter / Policies / Locked Policy/ Members by Subnet. Configure the locked policy as needed allowing connections to a handful of web sites and blocking all others.

It doesn't seem to work, can you help me?

Now, a Windows host with domain authentication and proxy settings is working fine. And a Linux machine with IP 10.4.0.212 without proxy settings is not working.

Thanks.

[Enrique Fernandez]

Hi.

Now is working, I have configured the ip in Exclusions - User 

Thanks!.

[Enrique Fernandez]

Hi.

Sorry! Is not working, with Exclusions -- IP, I am excluding the proxy from taking effect...

maybe I have to configure it like this?

Thanks!.