topic Re: squid in Operating System - Linux

squid

nightwich — Thu, 04 Jun 2009 08:34:33 GMT

Hi

I install and setup squid to use Ldap authentication. Although the first time users login and open his browser need to authenticate with "user" "password" to use Internet.

Is there any way to eliminate this issue!! .. I just want to authenticate in AD ( Active Directy ) and then just open the browser and be able to go to Internet !! ..

Thanks in advance

Re: squid

Steven E. Protter — Thu, 04 Jun 2009 08:52:23 GMT

Shalom,

Reading:

http://www.papercut.com/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory

http://www.cyberciti.biz/tips/howto-configure-squid-ldap-authentication.html

SEP

Re: squid

nightwich — Thu, 04 Jun 2009 09:05:12 GMT

Hi Steven

I already read those papers, they help me to configure LDAP authentication. It is now working.

But it is not exactly like I want.

Every time the user ( AD user login in his working machine and open his browser he have to authenticate again in his browser )

I want that user just open the browser and go to Internet !! ..

Please advice !! ..

Regards ..

Re: squid

Michal Kapalka (mikap) — Thu, 04 Jun 2009 09:29:18 GMT

Hi,

normally if the computer is joined to the domain, and he will use a browser ( IE ),
it's without, aditional authentication,

Its depend how your ldap helper make a query to the AD, we used some time ago Proxy auth with the winbind to the AD.

mikap

Re: squid

Steven E. Protter — Thu, 04 Jun 2009 11:16:23 GMT

Shalom,

First document is active directory integration.

The user is in ADS, and logged in they get to use the proxy.

If you go to a fixed IP address model, you can authorize by ip address or even hostname.

You can even configure squid to work off an access list.

But this integration assumes that if the user is on the network they are allowed to use the proxy server.

You may want to look into the basic documents on squid, what it was designed to do.

SEP

Re: squid

nightwich — Thu, 04 Jun 2009 13:39:16 GMT

Hi,

We be able to do this, using samba winbind and NTLM authentichation with squid.

Best Regards !! ..