Re: Squid/authpf with lookups on Active Directory

2007-10-20 Thread Schöberle Dániel
rom the AD localy into the OpenBSD. Regards, Daniel. > -Original Message- > From: Ari Constancio [mailto:[EMAIL PROTECTED] > Sent: Friday, October 19, 2007 7:43 PM > To: Steven Surdock > Cc: misc@openbsd.org > Subject: Re: Squid/authpf with lookups on Active Directory >

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Ari Constancio
Thanks to all for the replies. Everything is clear now; squid with ntlm auth and authpf with login_ldap will do the trick (sorry, Stuart, I didn't really read your message - now I have). Steven, I'm looking for a general gateway setup - not only web traffic. Cheers, Ari Constancio On 10/19/07, S

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Steven Surdock
Ari Constancio wrote: > Hi again, > > Sorry if I'm not being clear. > > I need this box to be a firewall and a proxy server. Squid, as it > seems, can use NTLM auth to get account info from AD. But what about > pf? > > How can I authenticate users from AD to get through pf? > > Thanks, > Ari Consta

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Stuart Henderson
On 2007/10/19 16:03, Ari Constancio wrote: > Hi again, > > Sorry if I'm not being clear. > > I need this box to be a firewall and a proxy server. Squid, as it > seems, can use NTLM auth to get account info from AD. But what about > pf? > > How can I authenticate users from AD to get through pf?

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Francesco Toscan
Il giorno 19/ott/07, alle 17:03, Ari Constancio ha scritto: How can I authenticate users from AD to get through pf? I'm unsure I've correclty understood your request. If you mean "How can I make my authpf users authenticate against AD" then use login_ldap from ports (you probably have to do s

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Ari Constancio
Hi again, Sorry if I'm not being clear. I need this box to be a firewall and a proxy server. Squid, as it seems, can use NTLM auth to get account info from AD. But what about pf? How can I authenticate users from AD to get through pf? Thanks, Ari Constancio On 10/19/07, Mark Rolen <[EMAIL PRO

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Mark Rolen
Steven Surdock wrote: To perform integrated NTLM auth I believe you'll need winbind from samba and windbind support for Squid. I'm not sure I understand the authpf requirement. http://marc.info/?l=openbsd-ports&m=119081356508513&w=2 -Steve S. I have to agree with Steven here, I don't under

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Steven Surdock
To perform integrated NTLM auth I believe you'll need winbind from samba and windbind support for Squid. I'm not sure I understand the authpf requirement. http://marc.info/?l=openbsd-ports&m=119081356508513&w=2 -Steve S. Ari Constancio wrote: > Mark, > > Thanks for replying. I found some mater

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Stuart Henderson
On 2007/10/19 14:09, Ari Constancio wrote: > Thanks for replying. I found some material about Squid but I'd really > like also to include authpf. You can massage the output from OpenLDAP's ldapsearch to generate a master.passwd file, pwd_mkdb, then login_ldap from packages can be used to authentic

Re: Squid/authpf with lookups on Active Directory

2007-10-19 Thread Ari Constancio
Mark, Thanks for replying. I found some material about Squid but I'd really like also to include authpf. Cheers, Ari Constancio On 10/19/07, Mark Rolen <[EMAIL PROTECTED]> wrote: > It's been over two years now, so specific steps are fuzzy now (I'd have > to start from scratch to do it again), bu

Squid/authpf with lookups on Active Directory

2007-10-19 Thread Ari Constancio
Hi, I'm looking for a MS-ISA server replacement, and I'm thinking specifically in an OpenBSD-based setup with authpf and Squid (NTLM auth) on Active Directory. Does anyone have a similar setup? Thanks in advance, Ari Constancio