Chromebooks, web proxies and authentication/logging

[Garacesh]

Currently we have our Smoothwall set up to use Kerberos authentication with our Windows machines, so it's all based off AD credentials.

Since our iPads don't have user accounts, they are filtered just the same but there's no way we can know which specific user was using the iPad at the time.

 

How are people with Chromebooks managing logging? We're looking at Chromebooks but this is potentially an issue.

Are we going to have to look into RADIUS, where our users sign on with their AD credentials if they want internet access? Or is there some other way of doing it?

[fiza]

Ours sign in with their Google credentials which are mapped to their Smoothwall groups. We use "connect for Chromebooks" extension deployed to each Chrome user.

[mjk]

We used to use Smoothwall and do RADIUS identification as you are suggesting.

It works well with as long as you have a single smoothwall server. If you have more than one you need to configure the RADIUS server to send identification packets to both machines simultaneously which caused some headaches.

The basic premise is that the RADIUS authenticates the user to the Wifi and puts them in the correct VLAN based upon LDAP group assignment. The RADIUS then sends an Identification packet to the Smoothwall that puts them into the correct filtering group and logs their internet behaviour.