Sponsored Content
Homework and Emergencies Emergency UNIX and Linux Support Configure Squid to use LDAP group auth to deny internet access Post 302453719 by wbdevilliers on Thursday 16th of September 2010 07:13:22 AM
Old 09-16-2010
Configure Squid to use LDAP group auth to deny internet access

Hi all

We have squid-2.5.STABLE11-3.FC4 running in our environment.

LDAP authentication works fine. Active Directory 2003 Users are prompted to enter credentials every time they access the net. The system works perfectly, but I need to configure Squid to block users in a specific AD group.

I did some searching on the net, but most of it looks confusing or is not what I really need.

So, I have a working Squid service running, I just need to configure Squid to deny Internet access for users in a specific AD group.

I did not set up & configure this server and dont know much about Squid yet.

Please help.

Thanks!
 

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

iPlanet on HP-UX - WANT to auth aganist MS Directory Services/LDAP

I am running iPlanet 6 on HP-UX 11, and presently all users can access the site. There are 6000 users accessing the website from an Windows Network. I would like users to access the site, but would also like to log user ID's in the access log, without prompting users for an ID/Password. Is... (1 Reply)
Discussion started by: shuterj
1 Replies

2. AIX

SSH + LDAP Auth Giving Fits

I'm having a bear of a time getting my LDAP connection going, so I hope someone here has some insight. I have AIX 5.3 running on an LPAR. I have ldap-client, ldap-max-crypto-client, gskak, and gskte installed. I'm able to set up the connection via mksecldap, and I can query users just fine... (1 Reply)
Discussion started by: AlexDeGruven
1 Replies

3. Web Development

squid -> deny cache of all dynamic asp websites

hi howto configure 2.6.STABLE5 to deny caching of .asp webpages? (3 Replies)
Discussion started by: ccc
3 Replies

4. AIX

Kerberos and LDAP Auth

Good day I am trying to configure Kerberos and LDAP authentication on AIX 5.3 with Windows 2003 R2 but something is not quite right. When I ran kinit username I get a ticket and I can display it using klist. When the user login I can see the ticket request on Windows 2003, but the user... (1 Reply)
Discussion started by: mariusb
1 Replies

5. UNIX and Linux Applications

How to redirect to squid login web page when internet access

Hi , I am new user. As you know when acl is defined in /etc/squid/squid.conf file according to its http_access users are able to access internet. Before that .htaccess asks them to access internet. It is fine. I saw in some customised linux servers in place of .htaccess login ,html web page... (1 Reply)
Discussion started by: sandeepvson
1 Replies

6. IP Networking

Squid vs iptables = no Squid access.log?

Hello, I have a pretty useless satellite link at home (far from any civilization), so I wanted to set up caching in order to speed things up. My Squid 2.6 runs "3128 transparent" and is set up quite well on a separate machine. I also have my dd-wrt router to move all port 80 traffic through... (0 Replies)
Discussion started by: theWojtek
0 Replies

7. Linux

How to deny facebook https using squid proxy in Centos 6.5?

Hi we have Centos Server and we have client machines using Ubuntu 12.04 and Win7,I Have Configured Squid only purposely for facebook denied, Cos User;s often being in fb so need to do it, have configured squid as transpernt , followed this How to install squid proxy on centos 6 steps to did it and... (1 Reply)
Discussion started by: babinlonston
1 Replies

8. Linux

How to deny facebook https using squid proxy in Centos 6.5?

Hi we have Centos Server and we have client machines using Ubuntu 12.04 and Win7,I Have Configured Squid only purposely for facebook denied, Cos User;s often being in fb so need to do it, have configured squid as transparent , followed this How to install squid proxy on centos 6 steps to did it and... (2 Replies)
Discussion started by: babinlonston
2 Replies

9. Gentoo

LDAP-Auth does not work correctly with systemd

Hi, since the upgrade to Gnome 3.6 (now i have 3.8) the authentication over LDAP stops working. The whole machine does not start anymore. The machine boot, but no gdm and no X. I can login, with root, but then the tty hangs. When i look at ttyF12 i see a lot of systemd service the runs random,... (1 Reply)
Discussion started by: darktux
1 Replies
squid_session(8)					      System Manager's Manual						  squid_session(8)

NAME
squid_session - Squid session tracking external acl group helper SYNOPSIS
squid_session [-t idle_timeout] [-b dbpath] [-a] DESCRIPTION
This helper maintains a concept of sessions by monitoring requests and timing out sessions if no requests have been seen for the idle time- out timer. Intended use is for displaying "terms of use" pages, ad popups etc. -t idletimeout (default 3600) Specifies the session idle timeout timer. -b dbpath Path to persistent database. If not specified the session details will be kept in memory only and all sessions will reset each time Squid restarts it's helpers (Squid restart or rotation of logs). -a Active mode. In this mode sessions are started by evaluating an acl with the argument LOGIN, or terminated by the argument LOGOUT. Without this flag the helper automatically starts the session after the first request. EXAMPLE
Configuration example using the default automatic mode external_acl_type session ttl=300 negative_ttl=0 children=1 concurrency=200 %LOGIN /usr/local/squid/libexec/squid_session acl session external session http_access deny !session deny_info http://your.server/bannerpage?url=%s session Then set up http://your.server/bannerpage to display a session startup page and then redirect the user back to the requested URL given in the url query parameter. AUTHOR
This helper and documentation was written by Henrik Nordstrom <henrik@henriknordstrom.net> QUESTIONS
Any questions on usage can be sent to Squid Users <squid-users@squid-cache.org>. REPORTING BUGS
Report bugs or bug-fixes to Squid Bugs <squid-bugs@squid-cache.org> or ideas for new improvements to Squid Developers <squid-dev@squid- cache.org> SEE ALSO
squid(8) Version 1.0 19 March 2006 squid_session(8)
All times are GMT -4. The time now is 02:34 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy