Ident server

[Geoff]

I'm implementing Dansguardian here. I have a problem and a solution but I can't find the software I need to fix it.

 

Basically I need to be able to get the userid's from client machines. Because of the way my proxy server is configured I cannot use basic or ntlm authentication. I have to use dansguardians ident method. Therefore I need an ident server I can deploy to my client machines.

 

I cannot see to find one that's free that will forfill my requirements. They are:

 

* Easily deployable (MSI preferably, but vbs/bat is ok too).

* Works ok on XP as a system service. No tray apps please!

* Works when no ones logged on (reporting the netbios name of the machine for example).

* Works on a terminal server (actually checks who the connection is owned by and not blindly reporting the console user regardless of the port query).

 

I have looked, and cannot find one that does all of these. As a last resort I will write my own (I've been trying to find a reason to learn C# and .net anyway).

[plexer]

Theres definately no way you can change your config so as to be able to use alternative identification?

 

Ident is easily spoofed.

 

Ben

[Geoff]

No. I can't use basic auth because of the usability issues. I can't use NTLM or Kerberos because that would require me to hack away at the dansguardian source. Also there is no mechanism for squid to pass user info it's got from NTLM (via winbind) to dansguardian.

 

Ident information will only be passed within the school network. I do not expect spoofing to be an issue.