Dansguardian with Active Directory not authenticating in certain browsers

montel · 07-19-2012, 05:37 PM

My first question here on LQ. Hope you guys can help me out

First off, ill describe my situation:
I have made a Debian server with Squid3 and Dansguardian authenticating against my Windows active directory. That part works great, but what I am having problems with is that Dansguardian only authenticates users that are using IE6. All other browsers that I have tried (IE8, Firefox, Chrome) do not work. I have set up two filter groups in Dansguardian, and in the filtergroupslist I have the user names assosiated with the separate filters.

I have searched logs, and there has been no errors that I could see. The only abnormality is that when the request comes from Firefox, Dansguardian doesnt log it, it just goes right to Squid. For example:

Firefox:

Code:

 
Squid Log:
1342725715.447    267 192.168.1.224 TCP_MISS/200 5904 GET http://www.addictinggames.com/ John.Smith DIRECT/$IP text/html
 
DG of same attempt:
2012.7.19 12:21:55 - 192.168.1.46 http://www.addictinggames.com *DENIED* Bannedsite: addictinggames.com GET 0 0  1 403 text/html   -

IE6:

Code:

Squid Log:
Never reaches squid.  Gets denied by DG (no log)
 
DG of same attempt:
2012.7.19 12:23:47 John.Smith 192.168.1.46 http://addictinggames.com *DENIED* Banned site: addictinggames.com GET 0 0  2 403 -  filter2 -

If someone could point me in the right direction I would greatly appreciate it. I have been at this for a while now. I can supply more logs or anything once I know what you need to see.

Thank you for your time

mpapet · 07-20-2012, 02:50 PM

In all cases, AD is successfully providing auth services? Every login attempt should be logged by AD.

Are the browsers all configured exactly the same with squid as the proxy?

montel · 07-20-2012, 02:55 PM

So there is no "fix" to this? Dansguardian just wont work authenticating while using Firefox?

What would you recommend a different way to properly authenticate users through squid but pass them to Dansguardian for filtering? Or a separate method all together?

montel · 07-20-2012, 03:10 PM

heh, sorry, I misread your question. My bad. I will go look at the AD logs and report back.

montel · 07-20-2012, 03:36 PM

In all cases, AD is successfully providing auth services?

Yes, AD successfully providing auth services.

Are the browsers all configured exactly the same with squid as the proxy?

Yes, while testing, I was pointing all browsers that I was using to: 192.168.1.224 port 8080 (the dansguardian port)