I am not sure that I am clear. It is working already for the most part, just not exactly as I want it to. Take this example: If I use command "wbinfo -u" I will receive the user "Shane" as one account listed... But, in Windows XP, I am signed in under "DOMAIN\Shane" so the authentication does not recognize me. If I type in "Shane" in logon screen for Squid, I am able to use just fine... The access log is updated as I browse the web. But, if I attempt to logon with "DOMAIN\Shane" I am rejected. I want Squid to recognize the "DOMAIN\Shane" as the username so my users do not have to logon. It would seem that if I can append "DOMAIN\" to the username that is passed, things would be fine... But I am not sure. Thank you for the assistance. Shane -----Original Message----- From: Dave Augustus [mailto:davea@xxxxxxxxxxxxxxx] Sent: Wednesday, March 12, 2008 4:19 PM To: Leach, Shane - MIS Laptop Cc: squid-users@xxxxxxxxxxxxxxx Subject: Re: Squid/Samba authenication with wrong username On Wednesday 12 March 2008 1:50:20 pm Leach, Shane - MIS Laptop wrote: > Dave, > > Perhaps my terminology was incorrect. I am wanting Squid to > log/filter web traffic. I want permissions to be based on A/D security groups. > From what I read, using NTLM or Samba, I could do this... The proxy > works fine, although it is requiring a login when a user opens an IE > session and I don't want the user to be prompted for username and > password. Instead, I'd like Windows to pass the credentials > automatically. > > Like I noted, though, it would appear it is passing only the username > and not the domain\username... It occurred to me that this could have > been the reason for the login every time someone opens IE. > > Any suggestions or ideas? > Google for squid nltm samba and you should find several resources about setting up what you want. I would get it working without groups FIRST and them add them later....one thing at a time. :) Dave
