[squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Johnson, S

I've been digging around while working on this and found a reference from 
someone 4 years ago that said that transparent proxy does not work with 
authentication.  Is this true?  I need to perform the following tasks:

1) Authenticate users against a windows AD
2) Transparent proxy (without the need to set browser settings at each 
computer). I'm looking at WCCP2 here
3) Log where people have gone for later review
4) Use a URL blacklist to block the majority of bad sites.

 Regards,
   Scott


Re: [squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Nick Duda
Yes you can. I do this perfectly, but requires using SmartFilter (which I find 
offers the better content filtering than the competition). I have a full step 
by step doc if you want it.


Sent from Blackberry

- Original Message -
From: Johnson, S [EMAIL PROTECTED]
To: squid-users@squid-cache.org squid-users@squid-cache.org
Sent: Mon Oct 13 15:12:50 2008
Subject: [squid-users] FW: Transparent proxy (WCCP) and LDAP authentication


I've been digging around while working on this and found a reference from 
someone 4 years ago that said that transparent proxy does not work with 
authentication.  Is this true?  I need to perform the following tasks:

1) Authenticate users against a windows AD
2) Transparent proxy (without the need to set browser settings at each 
computer). I'm looking at WCCP2 here
3) Log where people have gone for later review
4) Use a URL blacklist to block the majority of bad sites.

 Regards,
   Scott


Re: [squid-users] FW: Transparent proxy (WCCP) and LDAP authentication

2008-10-13 Thread Amos Jeffries

Correction. There are a few confusing terms here.

 'transparent' means different things when used to describe HTTP proxy
actions and Active Directory authentication.

 *transparent interception* (the proxy term) and the way HTTP works
prevents regular HTTP authentication methods being done. That is an
absolute. Security feature in browser. etc. etc.

 *transparent* authentication (the AD term people seem to like. I assume
they really mean invisible to the user) is one of the non-HTTP
authentication methods that can under careful setup work.

Amos


 Yes you can. I do this perfectly, but requires using SmartFilter (which I
 find offers the better content filtering than the competition). I have a
 full step by step doc if you want it.


 Sent from Blackberry

 - Original Message -
 From: Johnson, S [EMAIL PROTECTED]
 To: squid-users@squid-cache.org squid-users@squid-cache.org
 Sent: Mon Oct 13 15:12:50 2008
 Subject: [squid-users] FW: Transparent proxy (WCCP) and LDAP
 authentication


 I've been digging around while working on this and found a reference from
 someone 4 years ago that said that transparent proxy does not work with
 authentication.  Is this true?  I need to perform the following tasks:

 1) Authenticate users against a windows AD
 2) Transparent proxy (without the need to set browser settings at each
 computer). I'm looking at WCCP2 here
 3) Log where people have gone for later review
 4) Use a URL blacklist to block the majority of bad sites.

  Regards,
Scott