jajaja ok, you made me laugh I want the firewall to have the ability to see samba users and groups to be able to make firewall rules not only by ip, but also by users 2018-06-01 11:48 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>:> On Fri, 1 Jun 2018 11:36:47 -0300 > Carlos Bordon via samba <samba at lists.samba.org> wrote: > > > tell me , what you need? > > > > You could start with what you mean by 'integrate', followed by just > what you are trying to do ;-) > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On Fri, 1 Jun 2018 12:10:04 -0300 Carlos Bordon via samba <samba at lists.samba.org> wrote:> jajaja ok, you made me laughI have no idea why ?> > I want the firewall to have the ability to see samba users and groups > to be able to make firewall rules not only by ip, but also by usersHow do you do this with ldap ? Do you store anything in ldap or do you just authenticate to ldap ? What firewall program do you use ? Rowland
On 06/01/2018 11:10 AM, Carlos Bordon via samba wrote:> jajaja ok, you made me laugh > > I want the firewall to have the ability to see samba users and groups to be > able to make firewall rules not only by ip, but also by usersWhen you include users and groups on firewall policies, you need to start using application level proxies, be it an a HTTP proxy and/or a SOCKS proxy. If you are talking about an HTTP proxy (Squid maybe), you should play with configuration parameters like auth_param for authentication, acl , external_acl_type and http_access for authorization. ¿Are you using Squid?> > 2018-06-01 11:48 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > >> On Fri, 1 Jun 2018 11:36:47 -0300 >> Carlos Bordon via samba <samba at lists.samba.org> wrote: >> >>> tell me , what you need? >>> >> >> You could start with what you mean by 'integrate', followed by just >> what you are trying to do ;-) >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >>
is a palo alto It has the form of filtering by users for what I was watching and reading. i can do a rule that says, these users can reach such ip by such port but there is no case, try to configure it but it always throws an error that it does not reach the equipment or that it is down https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/authentication-types/ldap 2018-06-01 12:21 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>:> On Fri, 1 Jun 2018 12:10:04 -0300 > Carlos Bordon via samba <samba at lists.samba.org> wrote: > > > jajaja ok, you made me laugh > > I have no idea why ? > > > > > I want the firewall to have the ability to see samba users and groups > > to be able to make firewall rules not only by ip, but also by users > > How do you do this with ldap ? > Do you store anything in ldap or do you just authenticate to ldap ? > What firewall program do you use ? > > Rowland > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
it `s not a squid, i want do policies/rules for filtrate traffic to a determinate ip. 2018-06-01 12:21 GMT-03:00 Robert Marcano via samba <samba at lists.samba.org>:> On 06/01/2018 11:10 AM, Carlos Bordon via samba wrote: > >> jajaja ok, you made me laugh >> >> I want the firewall to have the ability to see samba users and groups to >> be >> able to make firewall rules not only by ip, but also by users >> > > When you include users and groups on firewall policies, you need to start > using application level proxies, be it an a HTTP proxy and/or a SOCKS proxy. > > If you are talking about an HTTP proxy (Squid maybe), you should play with > configuration parameters like auth_param for authentication, acl , > external_acl_type and http_access for authorization. > > ¿Are you using Squid? > > >> 2018-06-01 11:48 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org >> >: >> >> On Fri, 1 Jun 2018 11:36:47 -0300 >>> Carlos Bordon via samba <samba at lists.samba.org> wrote: >>> >>> tell me , what you need? >>>> >>>> >>> You could start with what you mean by 'integrate', followed by just >>> what you are trying to do ;-) >>> >>> Rowland >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >>> > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >