web proxy + active directory group authentication = not working

[Guest]

[chipbr]

hi there
i'm using a custom hyper-v VM made available on the other board which works great now.
first, SQUID was not working at all, but I managed to update from 3.0 to 3.0.5 and is now everything OK, except group authentication is not working.

I've joined endian to my domain, it recognizes all groups and users, but every config I try to made using GROUP AUTHENTICATION, it always prompt me for username and password and no one seems to work. after 5-6 tries, it gives up with a squid access denied page.
changing the same rule to user authentication works perfect.

is something I am missing?
even a "allow everything/no filter" rule does not work and asks for user/pass

[crisman]

I also would like to have some information on this since I've also used AD groups without success, but if I use one or more users from AD it works.

[dda]

Are you using NTLM?

[crisman]

Are you using NTLM?

Hi,

In my case yes I'm using NTLM.

Regards.

[chipbr]

yes, NTLM.
endian 3.0.5 fully updated to latest version
custom kernel/VM by user Timmeh (downloaded from the installation support board).

My Windows Server is 2012 R2, but my domain/forest level still 2008, not an issue because on 2.5 version it worked ok.

something is just not validating the user INSIDE the group, that's why it keep asking for user/password.

please help

[crisman]

yes, NTLM.
endian 3.0.5 fully updated to latest version
custom kernel/VM by user Timmeh (downloaded from the installation support board).

My Windows Server is 2012 R2, but my domain/forest level still 2008, not an issue because on 2.5 version it worked ok.

something is just not validating the user INSIDE the group, that's why it keep asking for user/password.

please help

Hi chipbr,

Do you have any error on the squid.log file?

Thanks.

[chipbr]

just a usual access denied