hi.

i've managed to set up a squid server to authenticate against our w2k domain using ldap (squid_ldap_auth & group).

so far so good, you can only access the web if you are a member of a paricular group.

my question is- is it possible to setup squid to automagically query ldap to check group membership from the information it obtains from internet explorer?

this already contains the username information. it seems silly to have to put in ldap permissions to read the ldap server when by default authent. users can read it anyway. why should users have to put in their password every time they open a browser?

thanks

john

I think you're looking for ntlm authentication.
here's more infos...

http://www.flatmtn.com/computer/Linux-SquidNT.html

hey niknah.

yeah i found that ldap asked for passwords, kerberos was ok but kept posting error messages into my windows security logs every 5 minutes, and finally basic winbind without the bells and whistles worked best of all (very ropey with trusted domains but i'll just set up a separate squid for that!)

thanks for replying