NTLM Proxy Authentication - How do you do it

[pooley]

Currently we Authenticate to County ISA 2000 server which provides schools with "surfcontrol" protected content.

 

Now Each schoo, is issued with a username and password to log onto the internet.

 

We found teachers didnt like the idea of having to enter the uid/pass/domain evertime they went online and it proved problematic with infant children being able to type correctly.

 

So we currently use Python with "NTLM Authorization Proxy Server" script which works ok. but we recently developed problems with certain SSL sites, the authentication to these sites failed and we could not gain access.

 

So to stop my rambling - does anyone else have this issue and if so - what do they use to get around it ?

 

Thanks

 

Si

[Geoff]

We have a local Squid box (which is also running dansguardian for filtering). This fully supports transparent NTLMv2 authentication.

 

Now our upstream LEA proxy doesn't require authentication, but if it did it would be trivial to tell squid to use authentication to access it.

 

Could you do something similar perhaps?

[webman]

We do the same as Geoff, with Squid - except it's packaged via IPCop and has a few addons for filtering. But yes, transparent NT auth with clients and passing a user/pass to an upstream proxy is possible.

[pooley]

My linux experience is "NIL" at present - so this could be an opportunity to play.

 

what's minimum speck for squid to run on ?

[Geoff]

Any old junk will keep up with a 10mbit internet connection.

[Gatt]

At moment we use Squid/DG boc for the kids, however this gets upstreamed to the LEA's ISA 2004 Proxy, which is also used by the staff.

Im not a fan of the LEAs proxy as recently it has been slow, their Content Filter (ContentKeeper) is a PITA and is now blocking a load of sites that used to be accessible - on both staff and pupil side (eg - Google Images, various MFL sites, etc)

 

If we do break away from the LEA, both staff and pupils will go through their own Squid/DG proxy, which will be upstreamed to an ISA server thgough this will not be confugred as a proxy - mainly as a firewall)

 

New problem with LEAs Proxy is that its failing to allow Vista to activate (0x8004FE33 error - Proxy Authentication) even thoiugh I can access the Internet fine..

[CyberNerd]

No Linux experience required:

 

http://www.smoothwall.net/products/schoolguardian5/