Re: [squid-users] Captive portal terminal server

From: Antony Stone <Antony.Stone_at_squid.open.source.it>
Date: Thu, 27 Jun 2013 19:42:29 +0200

On Thursday 27 Jun 2013 at 19:20:10, Oliveiros Peixoto (Netinho) wrote:

> Hi Antony.
>
> I have different acls that permit or deny access to urls. These acls
> apply to groups and users where they are identified by the ip/user you
> are logged in mysql.
> If multiple users log into the same station I will not be able to apply
> these acls.

In that case (if you cannot select the correct ACL based on just the user
part, from the group which might use that IP) I cannot think of a solution :(

I'd be interested if anyone else has an alterantive idea, though.

Out of interest, given that the usernames on the terminal server machine must
be unique, and you can therefore identify them to specific people, why can't
you assign userA/IPx to ACL1, userB/IPx to ACL2 etc?

Maybe you're sharing 5 usernames on the terminal server amongst 25 actual
people?

> Em 27/06/2013 14:12, Antony Stone escreveu:
> > On Thursday 27 Jun 2013 at 19:06:45, Oliveiros Peixoto (Netinho) wrote:
> >> Hello everyone!
> >>
> >> I would like to clarify some issues with you. I need to set up a captive
> >> portal for authentication of my users. I make this using External_acl
> >> program that getting user and ip in mysql. The problem is that now I
> >> have a windows server where multiple users use the terminal service and
> >> using any browser for navigation making it impossible to authenticate a
> >> user / ip. Does anyone have a solution for this problem?
> >
> > Can't you just put:
> >
> > userA / IPx
> > userB / IPx
> > userC / IPx
> >
> > into the database, so that all the users are accepted as coming from the
> > same IP?
> >
> > After all, what's the difference from a single PC where different users
> > could log on, but have the same IP address?

Regards,

Antony.

-- 
"640 kilobytes (of RAM) should be enough for anybody."
 - Bill Gates
                                                     Please reply to the list;
                                                           please don't CC me.
Received on Thu Jun 27 2013 - 17:42:40 MDT

This archive was generated by hypermail 2.2.0 : Thu Jun 27 2013 - 12:00:07 MDT