This howto is so you can setup two instances of squid, one running the NTLM authentication process & one running  the Cache process. The way it will work is when a website request first comes into the Proxy server it will get the required authentication from the first instance of squish running the NTLM authentication process then it will be passed onto DansGuardian for content filtering and if it passes the DansGuardian check then it will be passed onto the second instance of squid for cacheing.

Name: Squid
HomePage: http://www.squid-cache.org/
Function: proxy caching server for web clients

Name: Samba
HomePage: http://www.samba.org/
Function: Samba is a suite of programs that enables interoperability between Linux/Unix servers and Windows client

Name: DansGuardian
HomePage: http://dansguardian.org/
Function: web content filter

Name: Webmin
HomePage: http://www.webmin.com/
Function: A web-based interface for system administration for Unix

1. Download webmin from

http://www.webmin.com/download/

2. Login into webmin at http://webmin-server-ip-address:10000

3. Go to 'webmin' section, then to 'Webmin Configuration' & then choose 'Webmin Modules', after that click on the 'Clone Module' button

4. Clone the 'squid proxy server' module and call it 'Squid Proxy Server ntlm'

5. Prepare the second instance of squid

cp /etc/squid/squid.conf /etc/squid-ntlm/squid.conf

cp /usr/sbin/squid /usr/sbin/squid-ntlm

mkdir /var/spool/squid-ntlm

mkdir /var/log/squid-ntlm

chown squid:squid /var/spool/squid-ntlm

chown squid:squid /var/log/squid-ntlm

6. Now setup the second instance of squid, to to webmin again, then click on the 'servers' section and once there go to the 'Squid Proxy Server ntlm' module and press the 'Module Config' link and fill in the details.

Full path to squid config file:         /etc/squid-ntlm/squid.conf

Command to start squid:              /etc/init.d/squid-ntlm start

Command to stop squid:             /etc/init.d/squid-ntlm start

Command to apply changes:     

Squid executable:                        /usr/sbin/squid-ntlm

Full path to PID file:                      /var/run/squid-ntlm.pid

Full path the cache directory:      /var/spool/squid-ntlm

Full path the log directory:    /var/log/squid-ntlm

7. Download DansGuardian from http://www.dansguardian.com/download/

8. Install DansGuardian

rpm -ivh DansGuardian.rpm

9. Download the DansGuardian webmin module

sourceforge.net/projects/dgwebminmodule/

10. Install DansGuardian webmin module, go to webmin, select the 'webmin' icon, then go to 'Webmin Configuration' & then choose 'Webmin Modules' and choose 'install Module'

11. Lets set the the instances of squid to run on different ports

nano /etc/squid/squid.conf

nano /etc/squid-ntlm/squid.conf

12. Set the following information in your, dansguardian.conf file

nano /etc/dansguardian/dansguardian.conf

13. Now it's time to setup NTLM authentication in the first squid. edit the squid.conf file

add the following lines

nano /etc/squid-ntml/squid.conf

14. Once the NTLM authentication programs have been set it's time to set the http_access & the acl rules

nano /etc/squid-ntml/squid.conf

make sure that the http_access rules are the first in the list.

15. Now that the first squid server is set do use ntlm authentication it's time to winbind to authenticate against Active Directory. stop both winbind and samba services

/etc/init.d/smb stop
/etc/init.d/winbind stop

17. Edit Kerberos files to have the right configuration

nano /etc/krb5.conf

18. Edit Samba files to have the right configuration

/etc/samba/smb.conf

19. Now it's time to join the domain

net ads join -U administrator -S mc1

20. Now it's time to start both winbind and samba services

/etc/init.d/smb start
/etc/init.d/winbind start

21. Now hopefully all that went well, to test it out lets try this comand

/usr/bin/wbinfo -g

this should display all the groups in your active directory structure.

22. Now to set squid to be able to access the winbind information

chown root:squid /var/cache/samba/winbindd_privileged
chmod 750 /var/cache/samba/winbindd_privileged

23. Next step is to disable the caching in squid, edit the '/etc/squid/squid.conf'

24. Now set Dansguardian to be a second cache and to get squid to pass on the username to Dansguardian, edit the

/etc/squid/squid.conf

25. Now to set the second instance of squid to run as a different proccess, edit the squid-ntlm.conf

/etc/squid/squid-ntlm.conf

26. Set the logs to log in a different location.

/etc/squid/squid-ntlm.conf

27. Now were going to set squid1 to operate without a cache

/etc/squid/squid-ntlm.conf

28. Now lets start all the servers

/etc/init.d/dansGuardian start
/usr/sbin/squid -f /etc/squid/squid.conf -z
/usr/sbin/squid-cache -f /etc/squid/squid-cache.conf -z

29. You can download a init.d script i have writtern for the ntlm version of squid

http://www.opensourcehowto.org/uploads/ntlm.txt

30. Once both the servers are initialized then you can use the init.d scripts to star them

/etc/init.d/squid-ntlm start/stop/status

/etc/init.d/squid start/stop/restart/status

see the wiki pages for information about trouble shooting.

BookMarking:

cell1

cell3

cell4

Trouble Shooting:

Go to the wiki page

Go to the 'Contact Us ' Forum

Go to the how-to's Support Forum

External Links:

http://www.squid-cache.org/

http://www.samba.org/

http://dansguardian.org/

http://www.webmin.com/