LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 07-24-2008, 02:22 PM   #1
jimbo1954
Member
 
Registered: Oct 2006
Location: High Wycombe, Bucks, UK.
Distribution: Debian and Fedora Core in equal measure
Posts: 258

Rep: Reputation: 33
Active Directory Authentication of Dansguardian


I have a user operating a Windows/Active Directory environment. He wants Browser traffic filtering/inspection. I plan to deploy Squid and Dansguardian, and will need several Dansguardian groups to get the right filter for each of about 5 employee groups. I will also need to authenticate users so they are either placed in the appropriate group for their filter permissions, or will be dropped into a default whitelist group. Pretty straightforward, except I can't find how to authenticate Dansguardian against Active Directory.

Any suggestions/howtos/comments?

Thanks Guys
 
Old 07-25-2008, 07:24 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
there are numerous ways to do things in this area, the most simplistic is to just do LDAP auth against AD. http://www.cyberciti.biz/tips/howto-...ntication.html
 
Old 07-26-2008, 03:12 PM   #3
jimbo1954
Member
 
Registered: Oct 2006
Location: High Wycombe, Bucks, UK.
Distribution: Debian and Fedora Core in equal measure
Posts: 258

Original Poster
Rep: Reputation: 33
Yeah, but....

Hi Kewpie...dragging me out of the dirt again, eh? Thanks! Couple of questions:
1) I can't find squid_ldap_auth in the /usr/lib/squid directory, but I did find ldap_auth....are they the same?
2) OK, that will authenticate my users with squid; but how does that authentication commute from Squid to Dansguardian, which is where I need it to get the various DG groups to work
 
Old 07-27-2008, 01:33 PM   #4
jimbo1954
Member
 
Registered: Oct 2006
Location: High Wycombe, Bucks, UK.
Distribution: Debian and Fedora Core in equal measure
Posts: 258

Original Poster
Rep: Reputation: 33
D'oh! Ignore the first of the supplementary questions. If I *read* the document I would have seen that the file in question referred to OS-X...Think I had a senior moment! Second question still applies, however....

Cheers
 
Old 07-27-2008, 03:36 PM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
well having already started...

I'm not too au fait with DG, but it seems it runs as a down stream proxy to squid, and the authentication is still done via squid, not with DG at all. The data is still visible to DG but just an added bonus. http://dansguardian.org/downloads/de...on.html#client this looks fairly useful to actually see the architecture.
 
Old 07-31-2008, 09:59 AM   #6
jimbo1954
Member
 
Registered: Oct 2006
Location: High Wycombe, Bucks, UK.
Distribution: Debian and Fedora Core in equal measure
Posts: 258

Original Poster
Rep: Reputation: 33
A bit further...

Had a major googling session, and found this:
http://howtoforge.com/dansguardian-w...on-debian-etch which gets me 90% of the way there.

However, something is still not quite right. If I try to browse sites via Firefox 3, I get an authentication window pop up as soon as I try to browse to the first site after start up. If I enter the correct username/password, it just clears the box and re-presents it. If I cancel the box, and then re-enter the username/password when the box is re-presented, it is accepted, and the browser works fine.

If, on the other hand, I attempt to use IE (latest version), the authentication window pops up, I cannot get it to accept the username/password.

All the tests to show that AD has been correctly joined seem to work correctly.

Any ideas?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
active directory + samba + ntlm + squid + dansguardian log file jatender Linux - Server 3 12-03-2009 01:09 PM
Active Directory Authentication zenix Suse/Novell 29 03-22-2007 10:00 AM
Samba with Active Directory authentication Ziggie Linux - Enterprise 5 02-02-2006 07:43 AM
Active Directory authentication? cwhitmore Mandriva 3 03-09-2005 11:25 AM
active directory authentication mozilla Linux - Networking 2 02-21-2005 04:55 AM


All times are GMT -5. The time now is 03:48 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration