squid active directory users

[mirojr]

Hello,

 

Have been trying to get usernames into the access.log as opposed to just ip addresses within dansguardian.

 

I used to have a cache server that did all this, but wanted to do it on the cheap with my own linux setup.

 

I think the cache had some sort of intergration with AD through squid.

 

I tried some examples like: PaperCut KB | Configuring Squid on Linux to authenticate with Active Directory

 

but have still not got very far. aghhh

 

anyone got any help please?

 

Thanks

[Tyiell]

Do you want DansGuardian to filter based on usernames, or squid itself? I don't think squid can do that, but if you link your linux box to your domain with Samba and Winbind you can enable NTLM authentication on Dansguardian. Then just whack the usernames and their access levels (filter1, filter2, etc) into the "View/Edit filter group assignments" file.

 

Some pointers on how to bind your linux box to the domain can be found here, but be aware this guide is for debian etch, not the latest one (I'm told there are differences). I have used this guide on ubuntu karmic with little alteration.

 

Feel free to pm me if you have any specific problems, I did this quite recently, so you might ring a bell!!

[mirojr]

Thanks a lot.

 

I will look at the link, and prob pm you.

 

I have backtrack on the test server i am trying it on, and ubuntu on the production server i am going to eventually run it on.

[Tyiell]

Oooh, just googled backtrack (I'd never heard of it). Me likey!! I'm going to play with that

[mirojr]

Yes!

 

Thanks to your help its working

 

sudo wbinfo -g

 

is listing groups

 

I had to restart winbind.... which i did do previously, but not after i changed the FQDN in smb.conf to the netbios shorter version.

 

amongst the other things you had me try.

 

Thanks very much

[Tyiell]

Glad I could help