Authentication with SWE3 + DG

[dgsmith]

This is something I have been looking to do for some time but never really got it working and just put it on the backburner. The username displays as "-" on a blocked page, and we want to try and pick usernames up for both logging and grouping. Now what I want to know is - are we able to put users into "groups" which means they can only access certain websites (so for specific students, rather than block them entirely, have some in a whitelist)?

 

I think for getting username, it is looking like using identd as we need to keep transparent proxying on, however having installed an identd service and checked it's running, it doesn't report the username (the internal windows firewall is off and I even have an exception for port 113 incase).

 

In saying that, would enabling the username necessarily be a pre-requisit or even allow for the grouping I want to attempt?

[tom_newton]

Enabling username is a pre-requisite for grouping, yes. Not sure how grouping works in opensource DG (we use a proprietary AD add-on in our commercial editions) but I know it can be done.

[dgsmith]

Tom, do you know anyone on the express side of things you may be able to shed some light? Even if someone could take a guess why we don't seem to be getting anything back on identd would be appreciated!

[tom_newton]

Not off top of my head... have you tried the express forums?