OpenForum RSS: SquidGuard �� LDAP

SquidGuard �� LDAP (alekseyeng)

Thu, 16 Aug 2012 11:04:58 GMT

>> src internet {
>> ldapusersearch ldap://domain.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=inet_group,OU=inet,DC=domain,DC=local)(sAMAaccountName=%s))
> �� "}"
>> acl {
>> internet {
>> pass all
>> # redirect http://192.168.1.28/cgi/blocked?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
> ��
> 1. �� squidGuard � �� LDAP ?
> 2. �� "squidGuard -d"

"}" - �� .
�� squidGuard � �� LDAP.

2012-08-16 15:03:41 [10428] init domainlist /var/db/squidGuard/aggressive/domains
2012-08-16 15:03:41 [10428] loading dbfile /var/db/squidGuard/aggressive/domains.db
2012-08-16 15:03:41 [10428] init urllist /var/db/squidGuard/aggressive/urls
2012-08-16 15:03:41 [10428] loading dbfile /var/db/squidGuard/aggressive/urls.db
2012-08-16 15:03:41 [10428] init domainlist /var/db/squidGuard/ads/domains
2012-08-16 15:03:41 [10428] loading dbfile /v

SquidGuard �� LDAP (��)

Thu, 16 Aug 2012 10:07:00 GMT

> src internet {
> ldapusersearch ldap://domain.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=inet_group,OU=inet,DC=domain,DC=local)(sAMAaccountName=%s))

�� "}"

> acl {
> internet {
> pass all
> # redirect http://192.168.1.28/cgi/blocked?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u

��

1. �� squidGuard � �� LDAP ?
2. �� "squidGuard -d"

SquidGuard �� LDAP (alekseyeng)

Thu, 16 Aug 2012 05:47:54 GMT

>[�� ]
> pass all
> redirect http://proxy/cgi-bin/block.cgi?clientaddr=%a&clientname=%n&clientgroup=%s&targetgroup=%t&url=%u
> }
> ### DEFAULT ###
> default {
> pass !ads !in-addr none
> redirect http://proxy/replace/ERR_NOT_ALLOWED_INET.html
> }
> }
> �� "squid -k parse" � "squidGuard -d"

�� :

��
squid.conf

http_port 3128
cache_mem 1024 MB
cache_dir ufs /usr/local/squid/cache 50000 64 512
access_log /usr/local/squid/logs/access.log squid
cache_store_log none
error_directory /usr/local/etc/squid/errors/ru

url_rewrite_program /usr/local/bin/squidGuard
url_rewrite_children 20
url_rewrite_access allow all
#url_rewrite_access deny localhost
#auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
#auth_param ntlm children 5
#auth_param ntlm keep_alive off
#auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/etc/squid/ncsa.sams
#auth_param basic childr

SquidGuard �� LDAP (��)

Tue, 14 Aug 2012 15:07:56 GMT

>[�� ]
>>> acl {
>>> my_users {
>>> pass !mail all
>>> default {
>>> pass none
>>> log /var/log/squid/default.log
>> �� :
>> ldapusersearch ldap://dc-00.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=oit,OU=InternetAccess,OU=OU_GROUPS,DC=DC-00,DC=LOCAL)(sAMAccountName=%s))
> �� :((((((( ��
> squid.conf � squidGuard.conf

�� squid.conf �� , �� squidGuard:

url_rewrite_program /usr/local/bin/squidGuard
url_rewrite_children 200
url_rewrite_concurrency 0
url_rewrite_host_header on
url_rewrite_access deny lan_servers
url_rewrite_access allow all
redirector_bypass on

�� squidGuard.conf:

# CONFIG FILE FOR SQUIDGUARD
#

dbhome /var/db/squidGuard
logdir /usr/local/var/squid/logs/squidGuard

### --------------------- LDAP OPTIONS ----------------------------###
lda

SquidGuard �� LDAP (alekseyeng)

Tue, 14 Aug 2012 05:09:30 GMT

SquidGuard �� LDAP (alekseyeng)

Tue, 14 Aug 2012 05:04:57 GMT

>[�� ]
>> src my_users {
>> ldapusersearch ldap://domain.local:636/DC=domain,DC=lan?userPrincipalName?sub?(&(userPrincipalName=%s)(memberOf=CN=inet_group,OU=inet,DC=domain,DC=local))
>> acl {
>> my_users {
>> pass !mail all
>> default {
>> pass none
>> log /var/log/squid/default.log
> �� :
> ldapusersearch ldap://dc-00.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=oit,OU=InternetAccess,OU=OU_GROUPS,DC=DC-00,DC=LOCAL)(sAMAccountName=%s))

�� :((((((( �� squid.conf � squidGuard.conf

SquidGuard �� LDAP (��)

Mon, 13 Aug 2012 17:32:18 GMT

>[�� ]
> ldapbindpass 123qweQWE
> ldapcachetime 300
> src my_users {
> ldapusersearch ldap://domain.local:636/DC=domain,DC=lan?userPrincipalName?sub?(&(userPrincipalName=%s)(memberOf=CN=inet_group,OU=inet,DC=domain,DC=local))
> acl {
> my_users {
> pass !mail all
> default {
> pass none
> log /var/log/squid/default.log

�� :

ldapusersearch ldap://dc-00.local:3268/DC=domain,DC=local?sAMAccountName?sub?(&(memberof=CN=oit,OU=InternetAccess,OU=OU_GROUPS,DC=DC-00,DC=LOCAL)(sAMAccountName=%s))

OpenForum RSS: SquidGuard �������������� ������ �� LDAP

SquidGuard �������������� ������ �� LDAP (alekseyeng)

SquidGuard �������������� ������ �� LDAP (�����)

SquidGuard �������������� ������ �� LDAP (alekseyeng)

SquidGuard �������������� ������ �� LDAP (�����)

SquidGuard �������������� ������ �� LDAP (alekseyeng)

SquidGuard �������������� ������ �� LDAP (alekseyeng)

SquidGuard �������������� ������ �� LDAP (�����)

OpenForum RSS: SquidGuard �� LDAP

SquidGuard �� LDAP (alekseyeng)

SquidGuard �� LDAP (��)

SquidGuard �� LDAP (alekseyeng)

SquidGuard �� LDAP (��)

SquidGuard �� LDAP (alekseyeng)

SquidGuard �� LDAP (alekseyeng)

SquidGuard �� LDAP (��)