+ Post New Thread
Results 1 to 4 of 4
Internet Related/Filtering/Firewall Thread, Dansguardian, NTLM & security groups in Technical; Im just in the process of settintg up a Squid/dansguardian proxy to replace our current (broken) system. Its all set ...
  1. #1


    Join Date
    Oct 2006
    Posts
    3,412
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149

    Dansguardian, NTLM & security groups

    Im just in the process of settintg up a Squid/dansguardian proxy to replace our current (broken) system.

    Its all set up and working; DG passing NTLM to squid for authentication, reading from the "filtergroupslist" file for filtergroup determination. The "filtergroupslist" is generated by a nice little bash script from the DG website, which works by matching the AD security group to a filtergroup and outputting to the "filtergroupslist" file. ie

    Code:
    # /etc/dansguardian/lists/filtergroupslist
    user1=filter1
    user2=filter2
    user3=filter1
    etc
    Great, it works, but is there a way to make DG use the security groups directly, ie the equivelant of;
    Code:
    # /etc/dansguardian/lists/filtergroupslist
    staff_security_group=filter1
    pupil_securty_group=filter2
    etc.
    The idea being; with the bash script method when a new user is added to AD the script must be re-run. In the proposed method there wont be a script to run, so cutting out a step.

    Its not a big deal no, but i like to get things working the best i possibly can.


    Also how is everyone elses set up? Do you hae any extras/advice/etc to make my set up better?

  2. #2


    Join Date
    Oct 2006
    Posts
    3,412
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    Bumpy!

  3. #3
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    364
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    25
    We use AD groups in squid but ended up creating a seperate machine(virtual) for staff as we only use DG for pupils.

    Does the DG script work well? As would be interested in looking at this again.

  4. #4


    Join Date
    Oct 2006
    Posts
    3,412
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    149
    Quote Originally Posted by monkeyx View Post
    We use AD groups in squid but ended up creating a seperate machine(virtual) for staff as we only use DG for pupils.

    Does the DG script work well? As would be interested in looking at this again.
    Its just a bash script which looks for security groups in AD, pulls all the members and labels them with teh appropriate filtergroup. Cant really see how it could go wrong tbh.

SHARE:
+ Post New Thread

Similar Threads

  1. Moodle & NTLM Authentication
    By alan-d in forum Virtual Learning Platforms
    Replies: 12
    Last Post: 15th December 2009, 02:19 PM
  2. NTLM & MRBS : Accessing From WithIn The Network.
    By russdev in forum Web Development
    Replies: 6
    Last Post: 13th September 2009, 10:50 AM
  3. Replies: 2
    Last Post: 25th July 2009, 09:53 PM
  4. Global Security Groups - Server 2003
    By steve in forum Windows
    Replies: 4
    Last Post: 8th November 2007, 06:14 PM
  5. Security Groups in 2003
    By SpuffMonkey in forum Windows
    Replies: 1
    Last Post: 19th July 2006, 11:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •