Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Distribution: Debian and Fedora Core in equal measure
Posts: 264
Rep:
Active Directory Authentication of Dansguardian
I have a user operating a Windows/Active Directory environment. He wants Browser traffic filtering/inspection. I plan to deploy Squid and Dansguardian, and will need several Dansguardian groups to get the right filter for each of about 5 employee groups. I will also need to authenticate users so they are either placed in the appropriate group for their filter permissions, or will be dropped into a default whitelist group. Pretty straightforward, except I can't find how to authenticate Dansguardian against Active Directory.
Distribution: Debian and Fedora Core in equal measure
Posts: 264
Original Poster
Rep:
Yeah, but....
Hi Kewpie...dragging me out of the dirt again, eh? Thanks! Couple of questions:
1) I can't find squid_ldap_auth in the /usr/lib/squid directory, but I did find ldap_auth....are they the same?
2) OK, that will authenticate my users with squid; but how does that authentication commute from Squid to Dansguardian, which is where I need it to get the various DG groups to work
Distribution: Debian and Fedora Core in equal measure
Posts: 264
Original Poster
Rep:
D'oh! Ignore the first of the supplementary questions. If I *read* the document I would have seen that the file in question referred to OS-X...Think I had a senior moment! Second question still applies, however....
I'm not too au fait with DG, but it seems it runs as a down stream proxy to squid, and the authentication is still done via squid, not with DG at all. The data is still visible to DG but just an added bonus. http://dansguardian.org/downloads/de...on.html#client this looks fairly useful to actually see the architecture.
However, something is still not quite right. If I try to browse sites via Firefox 3, I get an authentication window pop up as soon as I try to browse to the first site after start up. If I enter the correct username/password, it just clears the box and re-presents it. If I cancel the box, and then re-enter the username/password when the box is re-presented, it is accepted, and the browser works fine.
If, on the other hand, I attempt to use IE (latest version), the authentication window pops up, I cannot get it to accept the username/password.
All the tests to show that AD has been correctly joined seem to work correctly.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.