Configuring Squid on Linux to authenticate with Active Directory

KB Home   |   Configuring Squid on Linux to authenticate with Active Directory

Main.ConfiguringSquidProxyToAuthenticateWithActiveDirectory History

Hide minor edits - Show changes to output

Changed lines 5-6 from:
[[https://www.papercut.com/tour/limit-internet-usage/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[https://www.papercut.com/tour/limit-internet-usage/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
to:
PaperCut Internet Charging and Quotas requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining Internet Quota access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
Changed lines 5-6 from:
[[https://www.papercut.com/products/ng/tour/internet_control/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[https://www.papercut.com/products/ng/tour/internet_control/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
to:
[[https://www.papercut.com/tour/limit-internet-usage/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[https://www.papercut.com/tour/limit-internet-usage/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
Changed lines 5-6 from:
[[https://www.papercut.com/products/ng/netcontrol/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[https://www.papercut.com/products/ng/netcontrol/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
to:
[[https://www.papercut.com/products/ng/tour/internet_control/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[https://www.papercut.com/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[https://www.papercut.com/products/ng/tour/internet_control/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
Changed line 66 from:
       -f "(&(objectclass=person)(sAMAccountName=[=%v=])(memberof=cn=[=%a=],dc=your,dc=domain,dc=com))"
to:
       -f "(&(objectclass=person)(sAMAccountName=[=%v=])(memberof=cn=[=%a=],cn=users,dc=your,dc=domain,dc=com))"
Changed lines 99-100 from:
If you'd like to know more about our print management and print accounting program please visit our [http://www.papercut.biz/ | home page]].
to:
If you'd like to know more about our print management and print accounting program please visit our [[http://www.papercut.biz/ | home page]].
Changed lines 11-12 from:
Using the Squid LDAP authentication helpers, you can achieve Active Directory user authentication with some simple Squid configuration.  There is no need to implement full Samba Winbind intergration.
to:
Using the Squid LDAP authentication helpers, you can achieve Active Directory user authentication with some simple Squid configuration.  There is no need to implement full Samba Winbind integration.
Changed lines 95-96 from:
!! Acknowledgements
to:
!! Acknowledgments
Added lines 99-100:
If you'd like to know more about our print management and print accounting program please visit our [http://www.papercut.biz/ | home page]].
Changed line 32 from:
       -w "password" -f sAMAccountName=[@%s@] -h 192.168.1.75
to:
       -w "password" -f sAMAccountName=[=%s=] -h 192.168.1.75
Changed line 66 from:
       -f "(&(objectclass=person)(sAMAccountName=[@%v@])(memberof=cn=[@%a@],dc=your,dc=domain,dc=com))"
to:
       -f "(&(objectclass=person)(sAMAccountName=[=%v=])(memberof=cn=[=%a=],dc=your,dc=domain,dc=com))"
Changed line 32 from:
       -w "password" -f sAMAccountName=%s -h 192.168.1.75
to:
       -w "password" -f sAMAccountName=[@%s@] -h 192.168.1.75
Changed line 66 from:
       -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,dc=your,dc=domain,dc=com))"
to:
       -f "(&(objectclass=person)(sAMAccountName=[@%v@])(memberof=cn=[@%a@],dc=your,dc=domain,dc=com))"
Changed lines 1-2 from:
(:title Configuring Squid to authenticate with Active Directory:)
to:
(:title Configuring Squid on Linux to authenticate with Active Directory:)
Changed lines 5-6 from:
[[http://papercut.biz/products/ng/netcontrol/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[http://papercut.biz/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[http://papercut.biz/products/ng/netcontrol/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article InstallingAndConfiguringSquidNTProxy.  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
to:
[[http://papercut.biz/products/ng/netcontrol/ |PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org |Squid]] on Linux/Unix as your proxy with [[http://papercut.biz/ |PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[http://papercut.biz/products/ng/netcontrol/ |Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article [[InstallingAndConfiguringSquidNTProxy | +]].  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
Added lines 1-2:
(:title Configuring Squid to authenticate with Active Directory:)
Changed lines 99-100 from:

[- keywords: squid, LDAP, linux proxy, papercut squid intergration, proxy net quotas -]
to:
[- keywords: squid, LDAP, linux proxy, papercut squid intergration, proxy net quotas -]

''Categories:'' [[!ProxyServers]
]
Changed line 3 from:
[[http://www.papercut.biz/screen_net.htm PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org Squid]] on Linux/Unix as your proxy with [[http://www.papercut.biz/ PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[http://www.papercut.biz/screen_net.htm Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article InstallingAndConfiguringSquidNTProxy.  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)
to:
[[http://papercut.biz/products/ng/netcontrol/ PaperCut Internet Charging and Quotas]] requires a proxy server to manage Internet connectivity and log internet usage by your users.  If you would like to use [[http://www.squid-cache.org Squid]] on Linux/Unix as your proxy with [[http://papercut.biz/ PaperCut]], then your Squid proxy needs to be configured to authenticate users with Windows.  This allows Squid to log usernames in the Squid access logs and allows only users with remaining [[http://papercut.biz/products/ng/netcontrol/ Internet Quota]] access to the Internet.  (If you would prefer to run Squid on Windows, then read our article InstallingAndConfiguringSquidNTProxy.  Setting up the authentication with the windows domain is considerably simpler than configuring LDAP on Linux/Unix)

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on June 09, 2015, at 01:20 PM
Printable View   |   Article History   |   Edit Article