on Wed, Mar 12, 2003 at 10:38:33AM +1100, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > The Samba server is a PDC (internal machine). Squid runs on the > gateway/firewall (seperate machine). Both are Mandrake 8.2 machines. > > Squid is installed via the squid-2.4.STABLE4-2mdk.rpm (from Mandrake). Is > it possible to test if './configure --enable-auth-modules="SMB"' was used.
Not sure. Look for a file called smb_auth under the squid directory. It uses smbclient from the samba package to connect to an smb share (the netlogon share by default - browsing for a NT domain controller - but this can be changed) using supplied username/passwd and tries to read the contents of a file called "proxyauth" (which will contain a single word "allow"). Its the read access on the file that does the trick. If you havent got smbclient installed it wont work. The following lines from my squid.conf do the trick: authenticate_program /usr/local/squid/libexec/squid/smb_auth -W DOMAINNAME acl internetusers proxy_auth REQUIRED http_access allow internetusers > Forgive my ignorance - what would squidguard provide? I havent used it but we do use a commercial webfilter, go to webpage www.squidguard.org. It says # limit the web access for some users to a list of accepted/well known web # servers and/or URLs only. # block access to some listed or blacklisted web servers and/or URLs for # some users. **) # block access to URLs matching a list of regular expressions or words for # some users. **) # enforce the use of domainnames/prohibit the use of IP address in URLs. # **) # redirect blocked URLs to an "intelligent" CGI based info page. **) # redirect unregistered user to a registration form. # redirect popular downloads like Netscape, MSIE etc. to local copies. # redirect banners to an empty GIF. **) # have different access rules based on time of day, day of the week, date # etc. # have different rules for different user groups. # and much more.. BB -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
