RE: [suse-linux-uk-schools] RM proxy server query
We've got an RM Proxy too, but that isn't my question. Has anyone had any experience, or know of any way of getting Squid to log usernames? We're using Windows 95/98 (*spultter*) clients with the Squid proxy and, at the moment, its going through an NT proxy first, just so we can see exactly *who* was accessing which site. Any ideas? - I was tempted to do a lookup with the IP address and time/date, but it wouldn't really be very successful. Thanks in advance! Dug Stokes ICT Technician Gilberd School
Dug
We've got an RM Proxy too, but that isn't my question. Has anyone had any experience, or know of any way of getting Squid to log usernames?
We already do that here. It's not totally foolproof but seems to work OK. It involves running an ident (I'll email the program we use, if you want) server as a transparent service on the workstations. In your squid.conf file you set up an acl for banned user names (can be real or fictitious) acl block_these_users ident "/var/squid/block_these_users" http_access deny block_these_users For each page request made an ident request is also made. This does hit performance slightly but not noticeable to pupils in general. A side effect of this that the result of the ident lookup is logged. Hope this helps. -- Mike Rees System Manager Ysgol Glanymor School Burry Port Llanelli SA16 0AL
----- Original Message -----
From: Administrator
We've got an RM Proxy too, but that isn't my question. Has anyone had any experience, or know of any way of getting Squid to log usernames? We're using Windows 95/98 (*spultter*) clients with the Squid proxy and, at the moment, its going through an NT proxy first, just so we can see exactly *who* was accessing which site.
Any ideas? - I was tempted to do a lookup with the IP address and time/date, but it wouldn't really be very successful.
Thanks in advance!
Yup. Two parter. Install an identd server on each client machine see e.g. http://identd.sourceforge.net/ for a simple one. Next set up squid to do identd requests via an acl. See the help on ident. Basically it's ident_lookup on acl local src 192.169.0.0/20 acl friends ident local then in your allow and deny bits use friends to force identd lookups. You can then use sarg or similar to see who has been where. John McCabe Network Mangler East Norfolk Sixth Form College C:\WINDOWS\RUN C:\WINDOWS\CRASH C:\ME\FDISK /usr/src/linux This e-mail is intended for the addressee shown. It contains information that is confidential and protected from disclosure. Any review, dissemination or use of this transmission or its contents by persons or unauthorized employees of the intended organisations is strictly prohibited. The contents of this email do not necessarily represent the views or policies of East Norfolk Sixth Form College, its employees or students.
[Charset iso-8859-1 unsupported, filtering to ASCII...]
We've got an RM Proxy too, but that isn't my question. Has anyone had any experience, or know of any way of getting Squid to log usernames? We're using Windows 95/98 (*spultter*) clients with the Squid proxy and, at the moment, its going through an NT proxy first, just so we can see exactly *who* was accessing which site.
Any ideas? - I was tempted to do a lookup with the IP address and time/date, but it wouldn't really be very successful.
Install an identd server on the workstations (one which bases what it returns on the logged in user) and enable identd in squid. -- Mark Evans St. Peter's CofE High School Phone: +44 1392 204764 X109 Fax: +44 1392 204763
You need an ident server running on the windows machine. Check out ident servers at www.squid-cahce.org Rob At 09:50 22/04/02 +0100, you wrote:
We've got an RM Proxy too, but that isn't my question. Has anyone had any experience, or know of any way of getting Squid to log usernames? We're using Windows 95/98 (*spultter*) clients with the Squid proxy and, at the moment, its going through an NT proxy first, just so we can see exactly *who* was accessing which site.
Any ideas? - I was tempted to do a lookup with the IP address and time/date, but it wouldn't really be very successful.
Thanks in advance!
Dug Stokes ICT Technician Gilberd School
-- To unsubscribe, e-mail: suse-linux-uk-schools-unsubscribe@suse.com For additional commands, e-mail: suse-linux-uk-schools-help@suse.com
participants (5)
-
Administrator -
manager -
Mark Evans -
Mike Rees -
s-clarob＠st-aidans.cumbria.sch.uk