Configuring Proxy Server and Windows authentication

[Guest]

[laythingy59]

can someone help me please

im running Endian Firewall Community release 2.2.rc3 and i cant get the Proxy Server and Windows authentication to work. I think i have set everything correctly but im still getting the username and password box on the clients, and it wont accept the usernames and passwords im putting in.

Does someone have a definitive/but simple guide to setting this up, if so could you share it please.

the firewall is joined to the domain, ive added groups, and policies for the groups, it just wont acceppt the user credentials i enter.

Thanks

Adam

forgot to mention that the authentication must use AD, and the firewall must require authentication
 

[laythingy59]

found something interesting

the authentication works in firefox and not ie7. i need this to work in ie7
any ideas anyone, would really appreciate it.

thanks

adam

[laythingy59]

just setup a VM running XP pro and ie 6, the authenticartion works on ie6..........

 Im realy stuck....

[Johnny Chin]

do you add

option wpad code 252 = text;

Custom configuration lines where is in the Services->DHCP Server

it work fine for me on both browser.

[npeterson]

Here are some instructions i typed up for someone else as well:

Goto the proxy configuration page, set your interfaces to authentication required, set the allowed subnets. Save. Goto the Authentication page, Domain name is your AD domain name, put in your Active directory server names for your primary and secondary in the PDC and BDC host names, Note that its not the FQDN just the hostname like DC1 or DC2. Enter a user name and password that has directory administrator rights. As best i can tell this is just to create the computer object for the system to authenticate to ad. Click Join Domain. After it has joined return to the page and Enter your domain name for the authentication realm, save. Setup rules, under default policy. I setup 2, one for general users and 1 for admins that bypasses filters. Then finally goto the Group policies page, click add/remove group. Add the groups you want to proxy by, save. Then on the Group policies page again, select the rule set you want applied to the groups you just added, click save.

[laythingy59]

Hi, thanks for the replys

ended up not using ad authentication, used local instead for the simple reason the user requested a username and password box everytime they use IE or whatever.... not sure why
using AD authentication ment the authenticating was automatic due to them already logging onto the domain.

Anyways

Thanks again

[davvidde]

You will find a fine setup guide here: http://www.advproxy.net/ldapads.html
Do not matter if it relays to IPCOP interface.