The domain join was very sketchy using authconfig-tui but I managed to get it basically configured so AD users can authenticate via SSH, the Squid proxy works with authentication turned off.
I'm working on setting up a Squid 4.0 explicit proxy for group based AD authentication against a Active Directory domain (Server 2012 R2) with SSL bumping on a minimal CentOS 7 (64b) install.