squid mac authentication

[insurin]

scenario

Windows Ad domain with squid as the proxy server

squid box is also member/samba server.

Internet usage is being logged transparently.

This is fine when users are logging on computers that are part of the AD domain. They do not get prompted for user credentials but traffic is still logged by username.

I have about 5% of users that use macs. At the moment when they fire up a web browser they get prompted for an AD user account to authenticate against squd. I can have it this way but is there a way for me to allow just the mac users to use squid without requiring any log on credentials while the other 95% has to by way of logging onto the windows domain.

I am thinking along the lines of access groups in squid.conf. If I made an access list for the mac users and allowed them through before the line "acl ldapauth proxy_auth REQUIRED"

would this work

[insurin]

I have made an acl with the mac ip addresses as the source and it has done the trick

acl macs src ip range

http_access allow macs
http_access allow ldapauth

logs are generated by ip address for mac users so case closed for this.