i am using squid with ntlm authentication, in linux environment. Problem is like if the ltsp server is connected to the internet and the client are able to access the internet, no authentication nothing.<br><br><div class="gmail_quote">
On Fri, Jun 13, 2008 at 2:00 AM, John Lucas <<a href="mailto:mrjohnlucas@gmail.com">mrjohnlucas@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">yogesh agrawal wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
thanx for ur help, so far we have used winbind to authenticate and have been able to authenticate with the nt server also we have been able to use ssh to authenticate with the domain using PAM, but that is in console.<br>
If u didnt get what i mean then,<br>
if i use ssh username@localhost then the localhost ask for password which it authenticate with the nt server.<br>
<br>
Now our problem how to integrate it with the gui, i mean log on menu<br>
<br>
john: i went through advance proxy, it can help to authenticate the ltsp server with the domain server. But my problem is how to authenticate the LTSP client with the domain or proxy server.<br>
<br>
</blockquote>
<br></div>
What proxy are you currently using? Is it Windows based? I have used LDAP authentication with Squid, and as I recall each session requires a login. If your proxy assumes that 1 PC == 1 User, then you may have to change proxies to do what you need (1 PC != 1 User).<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">
Peter: i went through the archive but couldnt find any thing, it would be really nice of u if u can direct me further .<br>
<br>
Yogesh<br>
<br></div><div class="Ih2E3d">
On Thu, Jun 12, 2008 at 7:50 PM, John Lucas <<a href="mailto:mrjohnlucas@gmail.com" target="_blank">mrjohnlucas@gmail.com</a> <mailto:<a href="mailto:mrjohnlucas@gmail.com" target="_blank">mrjohnlucas@gmail.com</a>>> wrote:<br>
<br>
Peter Scheie wrote:<br>
<br>
I think the usual solution is to run a separate proxy box<br>
between the ltsp server and the internet. The box runs squid<br>
which I believe has modules that can be used for authentication<br>
& authorization, etc. This question has come up on the list<br>
before; search the archives by googling for, say, 'web proxy<br>
site:<a href="http://www.redhat.com/archives/k12osn" target="_blank">www.redhat.com/archives/k12osn</a><br></div>
<<a href="http://www.redhat.com/archives/k12osn" target="_blank">http://www.redhat.com/archives/k12osn</a>>'.<div><div></div><div class="Wj3C7c"><br>
<br>
Peter<br>
<br>
<br>
The "Advanced Proxy" add-on to IPCop can use several authentication<br>
methods, including LDAP and Windows and it can be part of a<br>
Firewall/Content-filter/Proxy-caching setup in one box. I am using<br>
IPCop with several add-ons:<br>
<br>
- URLFilter (version of SquidGuard)- for content filtering<br>
- BlockOutTraffic for controlling outbound IP traffic<br>
- Update Accelerator - for caching updates for Apple, Linux and<br>
Windows (among others).<br>
- Advanced Proxy (version of Squid) - needed to have both Update<br>
Accelerator and URLFilter add-ons.<br>
<br>
Just make sure you have machine with adequate RAM and Disk space<br>
(I'm using a 2.8Ghz P4 with 2GB RAM and 80GB HD).<br>
<br>
<br>
yogesh agrawal wrote:<br>
<br>
hi everyone,<br>
<br>
I will try to explain my problem, in case of LTSP, if the<br>
server has access to internet all the clients also have<br>
access to internet. But my problem is i have to give access<br>
to only authorized person on the client to access net. so<br>
need some authentication system. At present we use non ltsp<br>
system which uses ntlm and proxy authentication.<br>
i cant use mac authentication, coz deployment site has<br>
cyber cafe kind of environment, i which user keep on<br>
changing but the machines r fixed.<br>
<br>
I am really stuck coz of this problem, it would be really<br>
nice of u if u let me know how to overcome this problem or<br>
direct me to other sites tht can help.<br>
<br>
best regards<br>
yogesh<br>
<br>
<br>
------------------------------------------------------------------------<br>
<br>
_______________________________________________<br>
K12OSN mailing list<br></div></div>
<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a> <mailto:<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a>><div class="Ih2E3d"><br>
<a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank">https://www.redhat.com/mailman/listinfo/k12osn</a><br>
For more info see <<a href="http://www.k12os.org" target="_blank">http://www.k12os.org</a>><br>
<br>
<br>
_______________________________________________<br>
K12OSN mailing list<br></div>
<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a> <mailto:<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a>><div class="Ih2E3d"><br>
<a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank">https://www.redhat.com/mailman/listinfo/k12osn</a><br>
For more info see <<a href="http://www.k12os.org" target="_blank">http://www.k12os.org</a>><br>
<br>
<br>
<br>
-- "History doesn't repeat itself; at best it rhymes."<br>
- Mark Twain<br>
<br>
| John Lucas <a href="mailto:MrJohnLucas@gmail.com" target="_blank">MrJohnLucas@gmail.com</a><br></div>
<mailto:<a href="mailto:MrJohnLucas@gmail.com" target="_blank">MrJohnLucas@gmail.com</a>> |<div class="Ih2E3d"><br>
| St. Thomas, VI 00802 <a href="http://mrjohnlucas.googlepages.com/" target="_blank">http://mrjohnlucas.googlepages.com/</a> |<br>
| 18.3°N, 65°W AST (UTC-4) |<br>
<br>
<br>
_______________________________________________<br>
K12OSN mailing list<br></div>
<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a> <mailto:<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a>><div class="Ih2E3d"><br>
<a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank">https://www.redhat.com/mailman/listinfo/k12osn</a><br>
For more info see <<a href="http://www.k12os.org" target="_blank">http://www.k12os.org</a>><br>
<br>
<br>
<br>
------------------------------------------------------------------------<br>
<br>
_______________________________________________<br>
K12OSN mailing list<br>
<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank">https://www.redhat.com/mailman/listinfo/k12osn</a><br>
For more info see <<a href="http://www.k12os.org" target="_blank">http://www.k12os.org</a>><br>
</div></blockquote><div><div></div><div class="Wj3C7c">
<br>
<br>
-- <br>
"History doesn't repeat itself; at best it rhymes."<br>
- Mark Twain<br>
<br>
| John Lucas <a href="mailto:MrJohnLucas@gmail.com" target="_blank">MrJohnLucas@gmail.com</a> |<br>
| St. Thomas, VI 00802 <a href="http://mrjohnlucas.googlepages.com/" target="_blank">http://mrjohnlucas.googlepages.com/</a> |<br>
| 18.3°N, 65°W AST (UTC-4) |<br>
<br>
_______________________________________________<br>
K12OSN mailing list<br>
<a href="mailto:K12OSN@redhat.com" target="_blank">K12OSN@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/k12osn" target="_blank">https://www.redhat.com/mailman/listinfo/k12osn</a><br>
For more info see <<a href="http://www.k12os.org" target="_blank">http://www.k12os.org</a>><br>
</div></div></blockquote></div><br>