Categories
Network

Squid Installation with AD authentication

In this prost we will discribe how to install squid proxy with Active Directory authentication.

The Squid installation it is done on Debian 6.0.4

Firstly, we need to configure the name server.

To connect to the server over SSH, we need to install SSH.

[blockquote align=”left” author=””]apt-get install ssh[/blockquote]

Install NTP Server:

[blockquote align=”left” author=””]apt-get install ntp-simple[/blockquote]

Edit the ntp file and add the frensh ntp servers:

Before installing squid we need to install:

  • samba used for connexion between Linux and Windows ;
  • krb5-user eand libpam-krb5 used by Kerberos for authenticating users to Active Directory
  • ntpdate : Used to synchronize date
  • winbind:used by samba to communicate with Active Directory.

After installing Kerberos, we need to synchronize the date using the command

[blockquote align=”left” author=””]sudo ntpdate 8.8.8.8[/blockquote]

After synchronizing the date, we will configure the Kerberos configuration file.

[blockquote align=”left” author=””]vi/etc/krb5.conf[/blockquote]

Now we will test Kerberos using the command:

[blockquote align=”left” author=””]sudo kinit Administrateur[/blockquote]

If doesn’t work, try to type [email protected]

And if doesn’t work try to restart the server.

After configuring Kerberos, we will start configuring samba. First, we need to stop Winbind and Samba and modify the file smb.conf:

Now, we will start samba and winbind

Join the domain:

[blockquote align=”left” author=””]sudo net ads join -U Administrateur [/blockquote]

After joining the domain, we will start squid installation:

[blockquote align=”left” author=””]-get install squid3 [/blockquote]

After installing squid, we will start squid configuration.

Categories
Network

Linux Server connexion through Squid

In this post, we will describe how to connect linux server to internet through proxy without authentication.

1.Firstly, we need to add this couple of line to use proxy for http, https and ftp: