Squid: Difference between revisions

From Q
Jump to navigation Jump to search
Tgurr (talk | contribs)
No edit summary
Tgurr (talk | contribs)
Line 29: Line 29:
== Configuration ==
== Configuration ==
{{Box File|/etc/squid/squid.conf|
{{Box File|/etc/squid/squid.conf|
#  TAG: auth_param
find, uncomment and alter the following
<pre>
<pre>
# The ACL helper queries our ADS via Samba
external_acl_type NT_global_group children=10 ttl=900 %LOGIN /usr/libexec/squid/wbinfo_group.pl
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
</pre>
</pre>
}}
}}

Revision as of 12:46, 22 April 2008

Description

Now that our Samba is connected to our Windows ADS we can start to authentificate our Squid users against Windows ADS Accounts and/or Groups.

Dependencies

USE-Flags

Template:Box File

Packages

Template:Box Code

Installation

# emerge squid

# chown root:squid /var/cache/samba/winbindd_privileged

# chmod 750 /var/cache/samba/winbindd_privileged

Configuration

Template:Box File

Finalize

# /etc/init.d/squid start

# rc-update add squid default