LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices



Reply
 
Search this Thread
Old 01-28-2005, 10:22 PM   #1
eech55
LQ Newbie
 
Registered: Aug 2004
Posts: 23

Rep: Reputation: 15
QUESTION: DansGuardian and User Authentecation


hello!


i am using dansguardian with squid-cache proxy. i want to use authentication.

i dont know what are the available options. one of the available options are "smb_auth" but how to use it?

is there any other available authentication methods?

some authentication methods are not secure at all! for example my college had a proxy with authentication and all passwords were sent without encryption or weak encryption!


so the first question is : what is the most secure proxy authentication method available ?


the second question is: how to do it or is there any good tutorial ?. i am searching for about one week and i didnt get any good result. i am counting on you guys!




waiting to hear from you

Last edited by eech55; 01-28-2005 at 10:23 PM.
 
Old 01-29-2005, 01:24 PM   #2
peter_robb
Senior Member
 
Registered: Feb 2002
Location: Szczecin, Poland
Distribution: Gentoo, Debian
Posts: 2,458

Rep: Reputation: 47
Try this Googled link..
http://www.harkness.co.uk/proxy/web_caching.html (the end of the page)
and a comment from the Author about using proxy_auth..
http://groups.yahoo.com/group/dansgu.../message/10297

This looks like it uses squid to auth against a samba server as IE clients hold their login info ready...
 
Old 01-29-2005, 08:47 PM   #3
eech55
LQ Newbie
 
Registered: Aug 2004
Posts: 23

Original Poster
Rep: Reputation: 15
thanks peter_robb


as i read, most proxy auth methods are sent in plain text, or just encoded to binaries which can be easly decoded. absolutely not secure.

what about smb_auth? how secure is it?

umm NTLM, it does not ask the user about for proxy auth coz IE will store user name and password in its memory some where. means one login is enough. but i dont want this because of two reasons:-

1- DansGuardian does not support NTLM as shown in its configuration page.
2- i want the user to be asked each time, because it can be that the user leaves his comptuer open after his logon. so it is better to be asked each time.

but what about security? NTML or smb_auth?
security is at the first place, if NTML is more secure than smb_auth, i'll use it. so please focus on this guys.



keep info comming
 
Old 02-02-2005, 11:21 AM   #4
peter_robb
Senior Member
 
Registered: Feb 2002
Location: Szczecin, Poland
Distribution: Gentoo, Debian
Posts: 2,458

Rep: Reputation: 47
Use the proxy_auth function in Dansguardian,
and setup squid to do NTLM.. then it's encrypted..

http://www.flatmtn.com/computer/Linux-SquidNT.html
http://squid.sourceforge.net/ntlm/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
using DansGuardian Trio3b Linux - Security 4 12-02-2005 04:18 AM
Dansguardian jomy Linux - Networking 2 11-27-2005 10:56 AM
install DansGuardian Trio3b Linux - Software 3 09-09-2005 05:49 PM
Dansguardian mahmoudkhn Linux - Networking 4 12-20-2004 07:15 AM
Postfix email user & linux user question. hct224 Linux - Newbie 0 11-30-2003 12:24 AM


All times are GMT -5. The time now is 10:09 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration