Re: [squid-users] smb_auth issue ?

On Saturday 14 June 2003 12.18, Mark Fagan wrote:
> Hi all,
>
> I am quite new to this list, however having sifted through many
> pages of FAQ's and config docs I am still confused as to if it is
> possible to acheive my goal.
>
> I am working with squid.2.4.stable1, and am trying to authenticate
> NT domain users/groups particularly groups against destination
> url's.
>
> for example group1 should only access www.cnn.com
> group2 should only access www.inex.ie
>
> I am having much difficulty in acheiving this, and having some
> pretty basic authentication issues.
>
> 1) smb_auth will only authenticate the (NT) user I initiate the
> smb_auth script as, once authenticated I get the usual Internet
> explorer "we cant find www.whatever.com" if I then re-type the url
> I get out fine.

This is a IE bug. See the Squid FAQ:

> 2) If I attempt to authenticate as any other NT user I get the same
> blank page, but cannot get out to the Internet. (weird)

Have not heard of this symptoms, but it quite likely is the same
bug.,.

> I am looking to perform authentication based on NT group and am
> using webmin as the interface to acheive this (currently) I also
> tried manually editing the squid.conf as well to no avail.

smb_auth does not and can not have group integration.

> Can I authenticate particular NT groups based on destination URL
> with smb_auth, I cannot find documentation anywhere on hos this is
> acheived.

Not with smb_auth. But you can by using the winbind helpers. See the
Squid FAQ entry on how to set up Squid for using winbind.

> I beleive there are multiple solutions for NT authentication such
> as NTLM etc, however it is not possible for me to recompile of
> upgrade squid at this time.

Then for groups you will need to maintain local text files listing the
members of each group, and define a proxy_auth acl per group.

Note: The browser issues discussed above is just that, and not
something Squid can be blaimed for.

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com