Re: [squid-users] NTLM authentication

Alexander Kiselev wrote:

> The two questions:
> 1) How can i collect/see the per user statistic if only IP addresses
> (without usernames) are stored in access.log?

If you are using authentication then usernames are stored in access.log in
the user field. This is in addition to the client IP address. Only where the
user isn't yet logged in (being denied by Squid with a 407 error) will the
username field be blank as it isn't yet known by Squid.

> 2) In MSNT method there are
> two files on Proxy server's side - "$SQUID_BASE/etc/allowusers" and
> "$SQUID_BASE/etc/denyusers". So, i can permit or deny the access of the
> user to Internet in these files. Unfortunately, there is no such scheme in
> NTLM method - all requests passed directly to NT domain controller. How can
> i limit the access of users to Internet on Proxy server's side using NTLM
> method?

Currently being worked upon. For now you will have to have a list all allowed
users in the proxy_auth acl (use a included file to keep squid.conf clean).

-- 
Basic free Squid support provided thanks to MARA Systems AB
Your source of advanced reverse proxy solutions or customized
Squid solutions. http://www.marasystems.com/products/