Re: squid ACLs and LDAP

[Kurt <kurt@lugrav.de>]

* Gavin McCullagh <lists_gmc@fiachra.ucd.ie> [040831 00:13]:

> Hi,
> 
> I guess this is a feature request.  
> 
> Some schools will not be willing to hand out web access to just anyone on
> their network.  I know of at least one which currently uses the password
> system in squid to restrict such access.
> 
> This would be a very useful feature to have available in the debian-edu
> toolset.  The most convenient way would seem to be granting web access on a
> unix group basis.   I'm not sure how well it works but the ldap_auth
> modules for squid would seem a logical first guess.
> 
> http://freshmeat.net/projects/ldap_auth/
> 
> The basic idea would be to allow some users (eg teachers, seniors) only.
> More than that though, one could imagine certain groups being given
> restricted access either to certain sites or even to filtered content.
> 
> I realise that filtering or restricting net access may cause philosophical
> issues for people but the situation is often that people may be given
> restricted access or none at all.

Hilaire (skolelinux.fr or ofset) has startet to use squidguard 
with the packets included in skolelinux. (squid, squidguard and
blacklist)
He uses a blacklist server for schools in Toulouse.

You need only the redirect line in squid.conf:

redirect_program /usr/bin/squidGuard -c /etc/chastity/squidGuard-chastity.conf

Benedict has startet to build a debian packet with a perl
frontend (Webmin like). The goal is, to allow an admin tu choose
different blacklist servers and to allow an automatic update of
the squidguard database.

Benedict (skolelinux.de) sent me the alpha version. 
If anybody is interessed to test and to develope with us, please
send me an email.

We need this in germany as soon as possible.

The host based filter is realized by other german school servers  
with an iptable script. It enables to cut off the internet 
connection roomwise.

So if a terminalserver has his thinclients in only one room, it
is easy to open or close the internet connection. It would be
nice to have something in the netgroup webmin tool.

Regards/Viele Gruesse!
Kurt
-- 
kurt.gramlich@lugrav.de   GnuPG Key ID  0xE263 FCD4