Re: [squid-users] How to restrict the users & validate the login credientials

Pavan Kumar Mahoorker wrote:

>Hi all,
>
>
>
>I have configured SQUID as HTTP proxy and allowed some range of IPs.
>
>And when I use internet form my PC for which I have configured this
>SQUID PC as proxy server and i can see all the traffic going through the
>proxy.
>
>
>
>Now I want to allow the PC's to access the Proxy server only if the
>login credentials authentication is success.
>
>And if the PC's fail to authenticate then the proxy should block the
>traffic.
>
>I have modified the /etc/squid/squid.conf file but looks like it needs a
>external auth server like LDAP, APACHE & etc...
>
>
>
>Let me know what needs to be done to achieve this
>
Hello Kumar,

The Squid source code comes with a few authentcation processes for Basic
authentication. These include

LDAP: Uses the Lightweight Directory Access Protocol
NCSA: Uses an NCSA-style username and password file.
MSNT: Uses a Windows NT authentication domain.
PAM: Uses the Linux Pluggable Authentication Modules scheme.
SMB: Uses a SMB server like Windows NT or Samba.
getpwam: Uses the old-fashioned Unix password file.
sasl: Uses SALS libraries.
winbind: Uses Samba authenticate in a Windows NT domain

If you have LDAP then you can configure with squid.

Configuration of LDAP can be done with the following

Compiling squid with ldap support.
./configure --enable-basic-auth-helpers="LDAP"

In squid.conf file edit the following
auth_param basic program /usr/local/squid/libexec/squid_ldap_auth -b
dc=yourdomain,dc=com -f uid=%s -h yourdomain.com
acl password proxy_auth REQUIRED
http_access allow password
http_access deny all

This Squid-LDAP Setup allows the users in the LDAP to access the pages
and deny all the others.

Similarly you can configure with the other authentication methods.

-- 
Thanks,
Visolve Squid Team,
http://squid.visolve.com