LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (http://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Dansguardian with Active Directory not authenticating in certain browsers (http://www.linuxquestions.org/questions/linux-newbie-8/dansguardian-with-active-directory-not-authenticating-in-certain-browsers-4175417679/)

montel 07-19-2012 05:37 PM

Dansguardian with Active Directory not authenticating in certain browsers
 
My first question here on LQ. Hope you guys can help me out :)

First off, ill describe my situation:
I have made a Debian server with Squid3 and Dansguardian authenticating against my Windows active directory. That part works great, but what I am having problems with is that Dansguardian only authenticates users that are using IE6. All other browsers that I have tried (IE8, Firefox, Chrome) do not work. I have set up two filter groups in Dansguardian, and in the filtergroupslist I have the user names assosiated with the separate filters.

I have searched logs, and there has been no errors that I could see. The only abnormality is that when the request comes from Firefox, Dansguardian doesnt log it, it just goes right to Squid. For example:

Firefox:
Code:


Squid Log:
1342725715.447    267 192.168.1.224 TCP_MISS/200 5904 GET http://www.addictinggames.com/ John.Smith DIRECT/$IP text/html
 
DG of same attempt:
2012.7.19 12:21:55 - 192.168.1.46 http://www.addictinggames.com *DENIED* Bannedsite: addictinggames.com GET 0 0  1 403 text/html  -

IE6:
Code:

Squid Log:
Never reaches squid.  Gets denied by DG (no log)
 
DG of same attempt:
2012.7.19 12:23:47 John.Smith 192.168.1.46 http://addictinggames.com *DENIED* Banned site: addictinggames.com GET 0 0  2 403 -  filter2 -

If someone could point me in the right direction I would greatly appreciate it. I have been at this for a while now. I can supply more logs or anything once I know what you need to see.

Thank you for your time

mpapet 07-20-2012 02:50 PM

In all cases, AD is successfully providing auth services? Every login attempt should be logged by AD.

Are the browsers all configured exactly the same with squid as the proxy?

montel 07-20-2012 02:55 PM

So there is no "fix" to this? Dansguardian just wont work authenticating while using Firefox?

What would you recommend a different way to properly authenticate users through squid but pass them to Dansguardian for filtering? Or a separate method all together?

montel 07-20-2012 03:10 PM

heh, sorry, I misread your question. My bad. I will go look at the AD logs and report back.

montel 07-20-2012 03:36 PM

In all cases, AD is successfully providing auth services?

Yes, AD successfully providing auth services.

Are the browsers all configured exactly the same with squid as the proxy?

Yes, while testing, I was pointing all browsers that I was using to: 192.168.1.224 port 8080 (the dansguardian port)


All times are GMT -5. The time now is 08:37 PM.