Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Web filtering and user authentication




We have trialled a solution called getbusi (www.getbusi.com)
We have purchased this and it is on its way.
It runs squid but has a web interface, is easy to setup and authenticates to ldap, in our trial it worked perfectly with mac os x server 10.3


We're looking at Web filtering/ monitoring solutions and a common problem we're encountering is when we mention the word "Mac". Most of the big players like Surf Control usually assume that everyone in the entire universe uses Windows boxes that authenticate to Active Directory. Yeah, right. The issue of course is finding a way to tie a user's internet activity to their login so that the logs aren't just lists of anonymous I.P numbers.

Several other candidates (like WebMarshall) claim that they can authenticate against LDAP, which I presume means that it would be fine with Mac OS-X Server 10.3. My greatest fear is the need to maintain duplicate user lists. Anything that could draw from our userlist on 10.3 server would save us a heap of time, but I don't know enough about LDAP, or Apple's flavour of it to know if it would work with filters that advertise "LDAP compatibility"

Has anyone implemented a web filtering/monitoring solution that authenticates against 10.3 Server? I am imagining that in such an arrangement, if all the web traffic is obliged to pass through the filter, then all our users (Mac or PC) would be confronted by some kind of login dialog when they open a web browser for the first time in a session. They would enter their username and password, just like they were connecting to an AFP server on the OS-X box, and from then on all their surfing would be duly logged against their name.

At least, that's how I'm guessing it would work. If the process could be automated through the regular login process at all our managed OS-X student terminals then this would be even better.

Can anyone help? Thanks.
-- Nathan Zamprogno,


IT Manager, John Wycliffe Christian School. Manager, Baliset Solutions consultancy
email@hidden, email@hidden (either reaches both) Mob: 0412 141 811


"The struggle for knowledge hath a pleasure in it, like that of wrestling with a fine woman."
- Lord Halifax 1680
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/ email@hidden


This email sent to email@hidden

Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

References: 
 >Web filtering and user authentication (From: Nathan Zamprogno <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.