search for: proxy_auth

...d, I want them to allow to access a few sites scuh as google.com,cnn.com, bbc.com. I want to limit in that way. I have wriiten below rules. But those users still can access all the sites. external_acl_type ip_user %SRC %LOGIN %DST /usr/lib/squid/ip_user_check -f /etc/squid/ip.conf acl ncsa_users proxy_auth REQUIRED acl ip_users external ip_user %SRC %LOGIN %DST http_access deny !ncsa_users http_access deny !ip_users http_access allow ip_users http_access allow ncsa_users my ip.conf file is like this. [root at worldnet squid]# cat /etc/squid/ip.conf 192.168.101.25 indunil .google.com .bbc.com .cnn...

...lp all the given to me. Finally, I got it done. Binding an ip address to an username with SQUID and limiting access of some users with their ips to a few sites rules added to squid.conf file external_acl_type ip_user %SRC %LOGIN /usr/lib/squid/ip_user_check -f /etc/squid/ip.conf acl ncsa_users proxy_auth REQUIRED acl ip_users external ip_user %SRC %LOGIN acl clientips src 192.168.101.28 192.168.101.29 192.168.101.30 acl allowedsites url_regex -i "/etc/squid/allowedsites.txt" http_access deny !ncsa_users http_access deny !ip_users http_access deny clientips !allowedsites http_access allo...

Hi list, i have a samba4 AD server working, and squid 2.7 auth internal...so i need change the auth of squid to my samba4 server....i search in google but information is incomplete and diferent...any official site, wiki or user experince to get information about? regards and thanks -- Administrador de Redes Nodo Provincial ESILT OS: Debian 7.5 wheezy

...ogram /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basicauth_param basic casesensitive offauthenticate_cache_garbage_interval 10 secondsauth_param basic children 45auth_param basic realm Please enter your credentials to access the proxyauth_param basic credentialsttl 600 minutesacl password proxy_auth REQUIREDhttp_access allow unrestricted_hostshttp_access allow password localnet# Default block all to be surehttp_access deny all My winbind_privileged drwxr-x--- 2 root proxy 512B Oct 2 10:00 winbindd_privileged Error logs: [2013/10/01 19:39:44, 0] utils/ntlm_auth.c:833(manage_squid_ntlmssp...

...elow are line that I have added to squid.conf file. auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off acl ncsa_users proxy_auth REQUIRED http_access allow ncsa_users We are currently browsing internet with usernames and passwords. But the problem is a user can access internet from all the workstation with his username and password. I do not need it. I only want a user to access internet from his machine. Solution to that...

...e allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_networks ##acl my_network src 175.10.0.0/16 ##http_access allow my_network acl AuthorizedUsers proxy_auth REQUIRED http_access allow all AuthorizedUsers ##acl password proxy_auth REQUIRED ##http_access allow password # And finally deny all other access to this proxy http_access deny all . . . This spawns another question - why do I need an auth_param for both ntlm and basic authentication? What'...

...e allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_networks ##acl my_network src 175.10.0.0/16 ##http_access allow my_network acl AuthorizedUsers proxy_auth REQUIRED http_access allow all AuthorizedUsers ##acl password proxy_auth REQUIRED ##http_access allow password # And finally deny all other access to this proxy http_access deny all . . . This spawns another question - why do I need an auth_param for both ntlm and basic authentication? What'...

...m max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes # auth_param basic program /usr/local/samba/bin/ntlm_auth -d 10 --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Highmark Proxy Server auth_param basic credentialsttl 2 hours acl internet proxy_auth REQUIRED http_access allow internet http_access deny all samba configured with: --with-winbind --with-winbind-auth-challenge --with-libsmbclient --with-ads --with-krb5=/usr/local smb.conf configuration: [global] workgroup = TSTDOM netbios name = squidtest server string = squidtest sec...

...per-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours And my ACL's acl all src 0.0.0.0/0.0.0.0 acl localhost src 127.0.0.1/255.255.255.255 http_access allow localhost acl AuthorizedUsers proxy_auth REQUIRED http_access allow all AuthorizedUsers http_access deny all http_reply_access allow all And if I try to browse anywebsite at all, the squid access.log shows TCP_DENIED/407 In the squid cache.log I can see it authenticateValidateUser: Validating Auth_user request '0x8487f80...

...etc/squid/acls/ms-update" acl atualizacoes dstdomain microsoft.com http_access allow microsoft http_access allow atualizacoes http_access allow localhost http_access allow purge localhost http_access deny purge http_access deny !Safe_ports http_access deny CONNECT !SSL_ports acl autenticados proxy_auth REQUIRED http_access deny !autenticados acl sites_liberados url_regex -i "/etc/squid/acls/sites-permitidos" http_access allow sites_liberados acl extensoes_bloqueadas url_regex -i "/etc/squid/acls/extensoes-proibidas" http_access deny extensoes_bloqueadas ### Bloqueia sites p...

...*resolution_replaygain_bps_out_radio_24bps; + static GtkObject *streaming_size_adj, *streaming_pre_adj; + static GtkWidget *streaming_proxy_use, *streaming_proxy_host_entry; + static GtkWidget *streaming_proxy_port_entry, *streaming_save_use, *streaming_save_entry; + static GtkWidget *streaming_proxy_auth_use; + static GtkWidget *streaming_proxy_auth_pass_entry, *streaming_proxy_auth_user_entry; + static GtkWidget *streaming_proxy_auth_user_label, *streaming_proxy_auth_pass_label; + #ifdef FLAC_ICECAST + static GtkWidget *streaming_cast_title, *streaming_udp_title; + #endif + static GtkWidget *strea...

...on auth_param basic program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off acl all src 0.0.0.0/0.0.0.0 acl authenticated proxy_auth REQUIRED http_access allow authenticated http_access deny all ## End of file With this configurations files the IE8 (in windows) and FireFox (in linux) show me the auth box but my user can't loggin success. I'm try with "administrator" username, "administrator at mydomain...

...lm max_challenge_lifetime 2 minutes auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of=MERCURY\WebAccess auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours acl AuthorizedUsers proxy_auth REQUIRED http_access allow all AuthorizedUsers -- Michael St. Laurent Hartwell Corporation

On Fri, 2018-09-07 at 20:14 +0200, Luca Olivetti via samba wrote: > El 7/9/18 a les 17:59, Marco Gaiarin via samba ha escrit: > > > It is better to install squid/freeradius in the same host of a DC, or > > don't bother at all so they can be installed also on a DM? > > I don't know if it's better but I'm running freeradius with ntlm_auth on > a

...s auth_param basic program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours acl authUsers proxy_auth REQUIRED http_access allow authUsers http_access deny all Someone told that this is basicly a samba error. Does anyone have an idea? Thanks in advance. __________________________________________________________________ D?couvrez le nouveau Yahoo! Mail : 250 Mo d'espace d...

hello, samba is setup PDC with ldap client : windows xp pro sp2 server : samba 3.0.20 + openldap 2.2 + squid 2.5stable14 + squidGuard is it possible to create an automatic logon with internet explorer ? perhaps with ntlm_auth, but i can't find the good sentence. thanks.

...> > program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd > > auth_param basic children 5 > > auth_param basic realm Squid proxy-caching web server > > auth_param basic credentialsttl 2 hours > > auth_param basic casesensitive off > > > > acl ncsa_users proxy_auth REQUIRED > > http_access allow ncsa_users > > > > We are currently browsing internet with usernames and passwords. But > > the problem is a user can access internet from all the workstation > > with his username and password. I do not need it. I only want a user > &...

...children 5 startup=1 idle=1 auth_param basic children 10 auth_param basic realm Internet Proxy Autorisation auth_param basic credentialsttl 1 hours authenticate_cache_garbage_interval 2 hour authenticate_ttl 2 hour authenticate_ip_ttl 2 hour ### acl for proxy auth and ldap authorizations acl auth proxy_auth REQUIRED Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: maandag 5 augustus 2019 9:00 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] problems with authenticatio...

...m ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic external_acl_type grupo ttl=900 concurrency=70 % LOGIN /usr/sbin/wbinfo_group.pl acl acesso external grupo internet acl CONNECT method CONNECT acl rede proxy_auth REQUIRED src 172.31.16.0/24 http_access allow acesso If I change to just authenticate users against the AD it works, but group restrictions don't... OK, let's see what's going on.... wbinfo -t checking the trust secret via RPC calls succeeded .... Looks ok... wbinfo -u EARTH\user1 E...

Hello, I've got a centos5 box that is now behind a what was transparent squid proxy. The proxy now has it's own dedicated ip and uses proxy basic authentication. I've got a firewall that redirects all outgoing port 80 traffic to that ip so anyone wishing access goes proxied. The problem is yum on my centos5 can't retrieve the .xml files for the various yum repositories. In