Re: [pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-24 Thread Robert Mortimer
Automatic WEB access authentication on FreeBSD based web proxy I have seen a couple of ways round this in the past. one was to automate an ssh connection to logon from the windows client machine (useing an ssl key from the user's home directory) This resulted in a scripted PF access list c

RE: [pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-22 Thread Ryan
> -Original Message- > From: Curtis LaMasters [mailto:curtislamast...@gmail.com] > Sent: Wednesday, April 22, 2009 2:18 AM > To: support@pfsense.com > Subject: Re: [pfSense Support] Re: Can captive portal > authenticate based on windows login > > Barracuda

Re: [pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-22 Thread Curtis LaMasters
Barracuda bases logins 100% on IP address when used as a transparent proxy. User opens browser and looks at google.com, the barracuda gets IP information from the Audit of login/logout on the domain controller and associates a users. The barracuda checks the user against a group and then allows o

Re: [pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-21 Thread Glenn Kelley
i believe the barracuda does this only when the outlook plugin has been downloaded - i could be wrong however but at least that is our experience thusfar. - actually there is one other time - when they are part of a windows network and ldap is involved already... On Apr 22, 2009, at 12:52

Re: [pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-21 Thread Curtis LaMasters
Somehow Barracuda's Web Filter does this. I know you have to install a DC client on the domain controllers that key's off of event log logins/offs and reports to the filter. Probably not what you need but it's an option. Curtis LaMasters http://www.curtis-lamasters.com http://www.builtnetworks.c

[pfSense Support] Re: Can captive portal authenticate based on windows login

2009-04-21 Thread Dave Warren
In message Dimitri Rodis was claimed to have wrote: >Single Sign-on (aka one set of credentials) is one thing, the captive portal's >ability to automatically _receive_ (and authenticate) the credentials from the >requesting client/browser is another. Unless I'm misunderstanding, Ryan wants >t