Topic: Sever and Gateway with Squid + Dansquardian in different Server

[veebr0]

Good Day for all, bellow my scenario:
Both server installed in SME 7.4
.- One server has been configured as a server and gateway.
.- Second is a Server that has been configured as a server only in order to provide services like :
      1.- File & Print
      2.- Domain Controller with roaming profiles, this server have all users and departmental information.
      3.- Intranet

The Idea is to use the first one (Server and Gateway) configured with Squid to run using AUTH_Pam, but additionally  need to filter some access via group, following the standard filter group used into the http://wiki.contribs.org/Dansguardian guide

Filter Group 1 - blocked users (no access)
Filter Group 2 - standard users (standard access rights)
Filter Group 3 - guest users (limited access rights)
Filter Group 4 - power users (more generous access & file download rights)
Filter Group 5 - admin users (unlimited access)

So in this cases all  users are authenticated by the second one server (Server Only+domain controller) but of course when their try to access internet, they received access denied the idea is to use filtering users access rights based on group membership in conjunction with Auth login as say in the install sme page.

I found some shell script that appear work for my case http://dansguardian.org/downloads/chrisnighswonger/usermap however this not appear the best practise solution.

Do you know if exist a better way to do that?

Thank in advance,
Eviny

[veebr0]

Some want have any idea to implement it?

Eviny

[David Harper]

AFAIK there is no way for SME Server to inherit the account list from another server.

If you are interested in testing work that is currently under development, you could try making your Internet gateway a Domain Member using the Advanced Samba contrib. However, I would test this extensively before deploying it, as it is not really designed for production use at this point.