Jump to content

Recommended Posts

Posted

Hello all,

 

I have setup Squid on Windows 7 and Dandsguardian on Ubuntu. I have got them both setup, but I was wondering if it is possible to get Dansguardian to use Squid authentication?

 

The only way I could get Squid to authenticate with AD was to use the Negotiate plugin, now that is working perfectly. I have entered the squid details into Dansguardian config, but I keep getting errors or if I enable any of the Danguardian plugins, a login box that no matter how many times I enter my details, wont accept them.

 

The reason I installed Squid on Windows, Was i could not get Squid to authenticate with AD on Linux.

 

If anybody else has done it this way or if anybody had any advice or ideas it would be greatly appreciated.

 

Sean

Posted

Got this working I had to setup for the Windows 7 machines 'Network security: LAN Manager authentication level Send LM & NTLM - use NTLMv2 session security if negotiated' in GPO.

 

I am having another problem though - I am trying to extract the groups from AD into the Dansguardian filtergrouplist, so that I can filter by group rather than user. I have found a script USERMAP2, that is supposed to do it for me but I can't for the life of me get it to work. Any ideas?

Posted
I am running Dansguardian on Ubuntu I have got it working I am just having problems extracting the data from AD to Dansguardian using the Usermap2 script. I can do it manually it would just be very time consuming?
Posted (edited)

I know in CentOS I have a domain joined samba server which basically is a file server but It's using AD auth for authentication, I used the command 'kinit' and net join -U administrator and used ntpdate server1.example.com and it joined to the domain with no issues. Using command getent passwd I can see all my users and groups.

 

I think this way might work as your DG machine would then be joined to the domain from there you'd be able to configure DG to use internal authentication and use your AD credentials.

 

Don't quote me on it though.

Edited by cpjitservices

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...