Re: [squid-users] Restricting access to users logging onto windows domain

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Tue, 01 Sep 2009 14:54:04 +0200

tis 2009-09-01 klockan 17:07 +0530 skrev Tejpal Amin:

> My aim is to stop users not logging onto my AD domain from accessing
> the internet.

I am afraid that is not possible. At the HTTP level (what Squid sees)
there is no difference between clients logging on automatically due to
having cached credentials from a domain logon or manually by entering
the credentials in a browser login box. Both is domain logons, differing
only in how the client got the logon information.

MAYBE it's possible with some domain policy settings, but I would not
think so.

Regards
Henrik
Received on Tue Sep 01 2009 - 12:54:14 MDT

This archive was generated by hypermail 2.2.0 : Tue Sep 01 2009 - 12:00:05 MDT