Hello. Does somebody try to use FR3 to act like squid proxy? Is this even possible? I want to block all websites and make exceptions(allow) for some specific sites. In generally, I try to replace AD and use LDAP/Samba4, maybe freeradius acting as hub to authenticate against external LDAP and authorize to resources(files, sites etc)... It's just ideas... -- Z poważaniem, *Dariusz Bloch* Specjalista ds. IT tel. +48 22 420 57 56 kom. +48 665 678 605 dariusz.bloch@telbridge.pl www.telbridge.pl <http://www.telbridge.pl> <http://www.telbridge.pl> <http://www.telbridge.pl> <http://www.telbridge.pl> Telbridge sp. z o.o. sp. k. ul. Zagnańska 49, 25-528 Kielce, NIP: 959-153-09-86. Sąd Rejonowy w Kielcach, X Wydział Gospodarczy KRS, KRS 0000788347, Oddział w Toruniu, ul. Gdańska 4a, II p. 87-100 Toruń, tel. +48 22 420 56 60, tel./fax +48 22 420 56 55
On Mar 19, 2025, at 5:51 PM, Dariusz Bloch via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Does somebody try to use FR3 to act like squid proxy? Is this even possible? I want to block all websites and make exceptions(allow) for some specific sites.
Uh, what? FreeRADIUS isn't an HTTP server. Alan DeKok,
I thought I might use FR+SMB4 AD/DC and then use group policy.. W dniu 19.03.2025 o 11:56, Alan DeKok pisze:
On Mar 19, 2025, at 5:51 PM, Dariusz Bloch via Freeradius-Users<freeradius-users@lists.freeradius.org> wrote:
Does somebody try to use FR3 to act like squid proxy? Is this even possible? I want to block all websites and make exceptions(allow) for some specific sites. Uh, what?
FreeRADIUS isn't an HTTP server.
Alan DeKok,
-- Z poważaniem, *Dariusz Bloch* Specjalista ds. IT tel. +48 22 420 57 56 kom. +48 665 678 605 dariusz.bloch@telbridge.pl www.telbridge.pl <http://www.telbridge.pl> <http://www.telbridge.pl> <http://www.telbridge.pl> <http://www.telbridge.pl> Telbridge sp. z o.o. sp. k. ul. Zagnańska 49, 25-528 Kielce, NIP: 959-153-09-86. Sąd Rejonowy w Kielcach, X Wydział Gospodarczy KRS, KRS 0000788347, Oddział w Toruniu, ul. Gdańska 4a, II p. 87-100 Toruń, tel. +48 22 420 56 60, tel./fax +48 22 420 56 55
On Wed, Mar 19, 2025 at 8:52 PM Dariusz Bloch via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I thought I might use FR+SMB4 AD/DC and then use group policy..
You should first check whether squid supports it. IIRC it supports using radius for user auth, but not for anything else. There's https://www.squid-cache.org/Doc/config/external_acl_type/ , so if you write your own helper, you should (in theory) be able to process and lookup the data from anything (the helper program defines it's own logic. Since you want to "use group policy from SMB4", the helper should probably integrate with SMB directly, without using FR. -- Fajar
W dniu 19.03.2025 o 11:56, Alan DeKok pisze:
On Mar 19, 2025, at 5:51 PM, Dariusz Bloch via Freeradius-Users<freeradius-users@lists.freeradius.org> wrote:
Does somebody try to use FR3 to act like squid proxy? Is this even possible? I want to block all websites and make exceptions(allow) for some specific sites. Uh, what?
FreeRADIUS isn't an HTTP server.
participants (3)
-
Alan DeKok -
Dariusz Bloch -
Fajar Nugraha