Proxy... problem filtering with groups ? [CLOSED]

[txsastre]

Hi there, still testing the 3.0 RC1.

In the proxy access rules I've created a very simple scenario 1 rule for 1 group (inside the group there are a few users).

The rule is "all time", "myGroup". "Allow All"

The PC (win XP) is correctly inside the zentyal-domain, but when I try to navigate (proxy correctly set) it shows to me an error. "access to cache denied" and I cannot navigate to anywhere.

But when I set the rules to "all time", "ANY". "Allow All" it works, but, obviously not filtering anything.

am I missing something ? or maybe its because its an RC version ?

Thanks !

[edit] a fer more tests. it seems that the groups does not afect the filters, so if the las rule to any is Allow all, so, everithing is working, but if is set to DENY, nobody can navigate.

So, the problem is focused on the relation between the groups and the proxy, seem that it does not recognize them.

[txsastre]

another test. I've been watching the proxy log, I think that I can say that definitely the problem is between users/groups and proxy, that it does not recognize them

Date    Host    User    URL    Bytes    Mime/type    Event
2012-08-31 13:18:15 192.168.200.157 192.168.200.157 http://static.ak.fbcdn.net/rsrc.php/v2/y...    0 -   Filtered

as we can see there are two IP, one is correct because is the host, the other should be the user name not the IP again. So I assume that the proxy does not reconize the user, because it should be a name, not an IP.

[Sam Graf]

I think you're correct. It seems that network objects work as expected, but not groups. The "blocked" page confirms that the proxy is seeing the IP, not the user.

There may be multiple problems with users/groups and the proxy; in tinkering around I could get the authentication dialog (Windows 7) but could not authenticate (Samba module not installed).

EDIT: Developers are already looking into it. http://trac.zentyal.org/ticket/4679

[txsastre]

ok. thank you. I'll be waiting for this, we need it for internet control.

Good work !