Re: User access control

From: Patricio Baptista da Luz <[email protected]>
Date: Wed, 03 May 2000 18:15:38 -0300

Hi Matthew,

Thanks for your info,.are you aware of any ident daemos available for
download that I could use in Windows workstations,

Thanks,

Patricio.

Matthew wrote:

> On Tue, 2 May 2000, Patricio Baptista da Luz wrote:
>
> > Hi everyone,
> >
> > I'm testing squid as a proxy server for Toyota in Brazil in a linux box,
> > and my goals are two:
> > 1) Filter adds and sites not related to normal activities (porn,
> > hacking, etc.)
>
> download a redirector at http://www.zip.com.au/~cs/scripts/squid_redirect.
> this will filter out ads. you can also download a list of banned domains
> somewhere and have a line like this in squid.conf
>
> acl banned_domain dstdomain "/etc/squid/banned_domain"
> http_access deny banned_domain
>
> > 2) Create a List of user/site access, to control where and when each
> > user is accessing.
> >
> > For the first item, im using squidGuard, and its OK.
> > but for item number two I need help. I dont Know how to force users to
> > "log" to squid or whatever, and i didn't find any soft that could make
> > reports on squid logfiles.
>
> i don't think u really need any software for this. Simply less
> /usr/local/squid/log/access.log. to get user names to appear beside log
> entries u must set up some access control.
>
> you can setup access control to allow certain computers only to access
> certain sites only. (this wont store the usernames)
>
> or you can use smbauth as suggested. the user will have to type in their
> windows username and passwd when the browser loads.
>
> or you can use ident lookups which work very well. this involes putting
> an ident daemon on all your workstatsions. if u're network is a windows
> 9x one - then this is insecure, but u might be able to rely on users lack
> of knowledge. NT and Linux are fine.
>
> >
> > If someone have this scenario, and could give me some hints, I would be
> > thankfull
> >
> > Thanks
> >
> > Patricio Baptista da Luz
> >
> >
> >
> >
Received on Wed May 03 2000 - 15:30:12 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:53:15 MST