Topic: dialin problems

[Cyrus Bharda]

Howdy all, I am having a very interesting problem, I have a SME 5.5 U2 running and also a W2k server box. Now the W2k is the domain controller and does DHCP, it also provides dial-in access. On the SME I have a squid proxy auth module from, www.e-smith.dyndns.com which means that whenever someone trys to browse they have to enter a username and password to get access to the outside world.

So heres the problem, when I dial into the W2k box, I get an internal IP address so when I try to broswe the internet, I get an "Access is denied" page. No pop-up for entry for the username or password? Once I turn the password protection off it works perfectly, but obviously I dont want to do that.

So it seems that I can have one or the other, not both? Even if I terminal serve into the W2k box after I have dialed in I get the same message, even though then I am supposed to be on the W2k box.

When I terminal serve into the W2k box locally from the internal LAN it works fine, also it works fine on the internal LAN. When I dial in I do get an internal IP address for PPP but not the ethernet adapter, is tht what is going wrong?

Thanks a lot for your time!!

Cyrus Bharda

[Krusty]

Cyrus I have a module that someone wrote for us at j-ones that you might want it put a extra part into the proxy users so you can assign rights to the internet by ip address. Supposedly there was a problem with the squid proxy user module/rpm so this guy rewrote it and put an extra part in it. We have tested it and it works well if you want it

[Krusty]

Cyrus I have a module that someone wrote for us at j-ones that you might want it put a extra part into the proxy users so you can assign rights to the internet by ip address. Supposedly there was a problem with the squid proxy user module/rpm so this guy rewrote it and put an extra part in it. We have tested it and it works well if you want it

[Cyrus Bharda]

So basically you can set certain ip's to get net access without going though the authenticication? Or can you set certain ip's to be totally blocked from proxy access?

I guess this would help as then I could just set all the ip addresses held for the dialin I could set to be able to have access to the proxy without going through the auth proccess.

Which proxy auth module did you get changed and what type of changes were made?

Thanks Krusty,

Cyrus Bharda