RE: [squid-users] Squid/Samba authenication with wrong username

From: Leach, Shane - MIS Laptop <mis@dont-contact.us>
Date: Wed, 12 Mar 2008 16:31:16 -0500

I am not sure that I am clear. It is working already for the most part,
just not exactly as I want it to.

Take this example:

If I use command "wbinfo -u" I will receive the user "Shane" as one
account listed... But, in Windows XP, I am signed in under
"DOMAIN\Shane" so the authentication does not recognize me. If I type
in "Shane" in logon screen for Squid, I am able to use just fine... The
access log is updated as I browse the web. But, if I attempt to logon
with "DOMAIN\Shane" I am rejected.

I want Squid to recognize the "DOMAIN\Shane" as the username so my users
do not have to logon.

It would seem that if I can append "DOMAIN\" to the username that is
passed, things would be fine... But I am not sure.

Thank you for the assistance.

Shane

-----Original Message-----
From: Dave Augustus [mailto:davea@support.kcm.org]
Sent: Wednesday, March 12, 2008 4:19 PM
To: Leach, Shane - MIS Laptop
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Squid/Samba authenication with wrong username

On Wednesday 12 March 2008 1:50:20 pm Leach, Shane - MIS Laptop wrote:
> Dave,
>
> Perhaps my terminology was incorrect. I am wanting Squid to
> log/filter web traffic. I want permissions to be based on A/D
security groups.
> From what I read, using NTLM or Samba, I could do this... The proxy
> works fine, although it is requiring a login when a user opens an IE
> session and I don't want the user to be prompted for username and
> password. Instead, I'd like Windows to pass the credentials
> automatically.
>
> Like I noted, though, it would appear it is passing only the username
> and not the domain\username... It occurred to me that this could have
> been the reason for the login every time someone opens IE.
>
> Any suggestions or ideas?
>
Google for squid nltm samba and you should find several resources about
setting up what you want. I would get it working without groups FIRST
and them add them later....one thing at a time.
:)

Dave
Received on Wed Mar 12 2008 - 15:31:15 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Apr 01 2008 - 13:00:05 MDT