LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 10-05-2010, 05:24 PM   #1
TechnoBod
LQ Newbie
 
Registered: Jan 2003
Distribution: Fedora 14, Centos 6
Posts: 26

Rep: Reputation: 15
Squid/Dansguardian - Active directory authentication with prompt for credentials


Hello All,

Sorry this is another thread about authenticating against Active Directory, but having googled and searched the forums here on linux questions, I couldn't find the answers to my scenario.

I would like to be able to get squid or dansguardian to authenticate a user account against active directory so that a users browsing activities can be logged.

I can find lots a very useful info on how to set up ntlm_auth etc, but all of these methods produce a pop up window when the user launches the browser.

I'm posting this thread because I would like to be able to authenicate, but without a pop up window. Is there a way of automatically carrying out this authentication so that the user is unaware of it.

We've previously attempted authenticating against an NT4 PDC, but the users worked out that they could use any user account on the network, not just the user that was logged in which kinda defeated the whole idea of logging the users activity.

My current setup is:

Windows 2003 AD
Windows XP Clients, soon to be converted to windows 7.
Fedora 11 running squid and dansguardian.


Can anyone offer advice or point me in the direction of a web article that may help me solve the above scenario??

Many thanks.

Pete
 
Old 10-05-2010, 08:41 PM   #2
niknah
Member
 
Registered: Dec 2002
Location: In front of a computer
Distribution: UPS, DHL, FedEx
Posts: 466

Rep: Reputation: 38
You need to disable basic + digest auth(these are the popup type authentications) and only allow people in via ntlm auth. And you need to use IE for that to work.


I haven't tried it but here's another one that does similar things...

http://ntlmaps.sourceforge.net/
 
Old 10-05-2010, 10:09 PM   #3
jamrock
Member
 
Registered: Jan 2003
Location: Kingston, Jamaica
Posts: 444

Rep: Reputation: 41
Quote:
I would like to be able to get squid or dansguardian to authenticate a user account against active directory so that a users browsing activities can be logged.
Can you configure them to authenticate against OpenLDAP? OpenLDAP and Active Directory both use the ldap protocol for searching their directories.

Quote:
I can find lots a very useful info on how to set up ntlm_auth etc, but all of these methods produce a pop up window when the user launches the browser.
This is normal I think. I have seen Windows machines using IE ask for a username and password against Microsoft's proxy server. The only option I have seen people use is to save the password.

Last edited by jamrock; 10-05-2010 at 10:30 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
squid and active directory authentication fernfrancis Linux - Newbie 1 07-12-2010 07:47 PM
active directory + samba + ntlm + squid + dansguardian log file jatender Linux - Server 3 12-03-2009 02:09 PM
How we configure squid active directory and dansguardian mukeshgandhi Linux - Security 1 07-27-2009 05:08 AM
Active Directory Authentication of Dansguardian jimbo1954 Linux - Software 5 07-31-2008 10:59 AM
squid authentication with Active Directory ashfaq Linux - Software 8 03-14-2008 02:26 PM


All times are GMT -5. The time now is 10:24 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration