I am running SQUID on a Linux box. Now that NDS for Linux is available, I
plan to use NDS for user & resource management. I had the (**bright**)
idea that I could use NDS authentication to controll access to SQUID
instead of using machine IP as is currently in effect. This would also
make it transparent and avoid having to use passwords on SQUID which would
also become an administrative headache.
How possible would this be?
Scenario: NDS (possibly in conjuction with LDAP) is used to authenticate
the users on the network (single login). Based on the user's group (or
username), SQUID access is allowed or denied, with a custom error page
being returned for a rejection.
Advantages: on a typical network, users will not be able to bypass the
windows network login to allow (unauthorized) browsing. Roaming users will
not be able to simply switch machines or tinker with IP addresses to give
themselves web access.
Gerry George
Gerry E. George <ggeorge@digisolv.com>
Information Technology Specialist,
DigiSolv, Inc.
http://www.digisolv.com
.
Received on Sat Jun 10 2000 - 15:31:32 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:53:59 MST