On 11/6/06, Peter Hartmann <<a href="mailto:ascensiontech@gmail.com">ascensiontech@gmail.com</a>> wrote:<div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> > 1) Run the web browsers locally on each thin client. This will take up > tons of resources, at least for Firefox, but if you have the memory to spare > then this will fix it. Our principal wants logging of squidguard blocked attempts per user. I told him that I thought authenticating to squidguard with ldap was possible. Do you think I would have to run firefox locally too? Thanks, Peter </blockquote></div> Geez, I typed that long tecno-babble response and didn't really answer the question. You can use LDAP two ways, you can either have the kids log on to the terminals using LDAP, or you can have the kids logon when they start up the browser. AFAIK, if you use LDAP just for browser authentication then Squid will just authenticate ONCE. The problem you get into is that the first person to do the LDAP authentication sets the username/password for everyone on the machine. To allow the kids to logon to the terminals you can use the smbldap tools to make the same groups/users on the server. But then the kids will need to logon to the terminals to use them at all. If you want the kids just to use their logon for the Internet and not have to logon to start the terminals, then the only way to do it is to install firefox locally. Darryl