Find the answer to your Linux question:
Results 1 to 2 of 2
scenario Windows Ad domain with squid as the proxy server squid box is also member/samba server. Internet usage is being logged transparently. This is fine when users are logging on ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Dec 2008
    Posts
    21

    squid mac authentication


    scenario

    Windows Ad domain with squid as the proxy server

    squid box is also member/samba server.

    Internet usage is being logged transparently.

    This is fine when users are logging on computers that are part of the AD domain. They do not get prompted for user credentials but traffic is still logged by username.

    I have about 5% of users that use macs. At the moment when they fire up a web browser they get prompted for an AD user account to authenticate against squd. I can have it this way but is there a way for me to allow just the mac users to use squid without requiring any log on credentials while the other 95% has to by way of logging onto the windows domain.

    I am thinking along the lines of access groups in squid.conf. If I made an access list for the mac users and allowed them through before the line "acl ldapauth proxy_auth REQUIRED"

    would this work

  2. #2
    Just Joined!
    Join Date
    Dec 2008
    Posts
    21
    I have made an acl with the mac ip addresses as the source and it has done the trick

    acl macs src ip range

    http_access allow macs
    http_access allow ldapauth

    logs are generated by ip address for mac users so case closed for this.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •