Hello again,
what i have done till last post is:
icap_send_auth_user on
icap_auth_scheme WinNT://10.0.0.10/%u
also servce_1 and 2 as it is in the example, and my conf lines from before
for NTLM/samba, wbinfo_group.pl and acl and http_access for users in the
group "internet" in my NT domain.
also i made successful recognize user from icap-server (Webwasher), but
when i tried with group-- sorry, there is no such parameter in the squid
log file, access.log, so I can not send this nt group "internet"
and with this i receive messages that I'm not authorized. So can some one
tell me is it possible to extract also group from windows nt domain, and
to pass them to from icap client (squid) to icap server (in my case
webwasher).
thanks,
NN
nikolay.nenchev@xxxxxxxxxxxxxxxxxxxxxxx@inet
22.02.2005 11:46
To
cc
squid-users@xxxxxxxxxxxxxxx
Subject
Re: [squid-users] Forward Requests to different Ports: <<< Untrusted Mail
>>>
Hi to all,
I'm right now trying to implement webwasher 1000 csm appliance with squid
with icap support.
I need to make user/group authentication from NT domain, and because from
the appliance which is with CGLinux - rpm base system, doesn't support
NTLM, I have installed samba and making ntlm authenticationin from NT
domain true squid. And here comes my questions:
picture:
Webwasher Squid - NT domain
icap server samba-icap client
----------- ----------- -----------
|WW | icap |squid | NTLM | |
| |-----------| |----------------------- | |
| | | | | |
----------- _______ ------------
|
|
|
user - clients (browsers)
I have authenticated user in the proxy, but after that how to pass some
kind of credential to icap server (webwasher) and to make policy for every
different group.
Regards,
Nikolay Nenchev
michael.pophal@xxxxxxxxxxx@inet
22.02.2005 11:09
To
MA2412@xxxxxx
cc
squid-users@xxxxxxxxxxxxxxx
Subject
Re: [squid-users] Forward Requests to different Ports:
Why don't you create different webwasher profiles for different user
groups?
Regards michael
On Tue, 2005-02-22 at 09:46, Markus Atteneder wrote:
> Is it possible to configure squid to forward reqests comming from
specific
> hosts to the same "parent" as other requests but to a different port?
The
> reason is to bypass a webwasher on the "parent" server for these hosts
in
> order to allow denyed sites.
--
Mit freundlichen Grüssen / With kind regards
Michael Pophal
--------------------------------------------------
Topic Manager
Internet Access Services & Solutions
--------------------------------------------------
Siemens AG, ITO A&S 4
Telefon: +49(0)9131/7-25150
Fax: +49(0)9131/7-43344
Email: michael.pophal@xxxxxxxxxxx
--------------------------------------------------
