1745834 Members
4105 Online
108723 Solutions
New Discussion юеВ

Re: squid

 
nightwich
Valued Contributor

squid

Hi

I install and setup squid to use Ldap authentication. Although the first time users login and open his browser need to authenticate with "user" "password" to use Internet.

Is there any way to eliminate this issue!! .. I just want to authenticate in AD ( Active Directy ) and then just open the browser and be able to go to Internet !! ..

Thanks in advance
5 REPLIES 5
Steven E. Protter
Exalted Contributor

Re: squid

Shalom,

Reading:

http://www.papercut.com/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory

http://www.cyberciti.biz/tips/howto-configure-squid-ldap-authentication.html

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
nightwich
Valued Contributor

Re: squid

Hi Steven

I already read those papers, they help me to configure LDAP authentication. It is now working.

But it is not exactly like I want.

Every time the user ( AD user login in his working machine and open his browser he have to authenticate again in his browser )

I want that user just open the browser and go to Internet !! ..

Please advice !! ..

Regards ..
Michal Kapalka (mikap)
Honored Contributor

Re: squid

Hi,

normally if the computer is joined to the domain, and he will use a browser ( IE ),
it's without, aditional authentication,

Its depend how your ldap helper make a query to the AD, we used some time ago Proxy auth with the winbind to the AD.

mikap
Steven E. Protter
Exalted Contributor

Re: squid

Shalom,

First document is active directory integration.

The user is in ADS, and logged in they get to use the proxy.

If you go to a fixed IP address model, you can authorize by ip address or even hostname.

You can even configure squid to work off an access list.

But this integration assumes that if the user is on the network they are allowed to use the proxy server.

You may want to look into the basic documents on squid, what it was designed to do.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
nightwich
Valued Contributor

Re: squid

Hi,


We be able to do this, using samba winbind and NTLM authentichation with squid.


Best Regards !! ..