Ease WPAD integration in Zentyal

[christian]

if I'm not wrong, DNS based discovery will try wpad.mydomain.com but not wpad.something.mydomain.com
As this is based on domain your workstation is attached to, check this point first.

[cf]

Thanks for the suggestion... tried it, but it didn't work. (Maybe something else I got wrong? Once again, I could browse to it on the browser and it offered to download the file, but the browser did not seem to pick it up as a wpad.dat file.)

From http://www.wrec.org/Drafts/draft-cooper-webi-wpad-00.txt (one of the many sites I visited trying to find a solution :-)), it seems to indicate that it goes down (or up?) the domain name tree looking for wpad.dat files as it goes (but I could be misreading it...)

An excerpt is below... but first, another question which is sort of related (and will show my lack of knowledge on the subject).

Say I have a domain, mydomain.com, which is a real "external" domain with email and web sites hosted elsewhere... If I am setting up a local (or internal) domain (which is not really connected to mydomain.com, other than in name only)... is it wise to use private.mydomain.com or internal.mydomain.com (etc), or should I just make up some other internal domain name? In the future, who knows, I might host some of the real "mydomain.com". This may not be the forum to ask, but I am not sure where I should ask these rather basic, yet quite fundamental, questions (feel free to point me in a more suitable place to ask such questions).

Now the exert from the Web Proxy Auto-Discovery Protocol link above...
   As an example, consider a client with hostname
   johns-desktop.development.foo.com. Assume the web client software
   supports all of the mechanisms listed above. This is the sequence of
   discovery attempts the client would perform until one succeeded in
   locating a valid CFILE:
   o  DHCP
   o  SLP
   o  DNS A lookup on QNAME=wpad.development.foo.com.
   o  DNS SRV lookup on QNAME=wpad.development.foo.com.
   o  DNS TXT lookup on QNAME=wpad.development.foo.com.
   o  DNS A lookup on QNAME=wpad.foo.com.
   o  DNS SRV lookup on QNAME=wpad.foo.com.
   o  DNS TXT lookup on QNAME=wpad.foo.com.

[Zent User]

@ Christian,

       If you don't mind,can I've screenshots regarding to configure WPAD in Zentyal.

[christian]

If you mean from Zentyal GUI, then answer is no because this is not (yet ?) handled by Zentyal.
What is not clear to you?

[ichat]

zent user,

i dont want you to take this the wrong way or anything but:

have you consider already to contact the zentyal sales team for professional support...

you cant realy expect people to take you by the hand / implementing your network for you,  for each step of the way, without paying for it can you?

i mean there must be a limit somewhere.

[Zent User]

I've one doubt when we go for Explicit Proxy with WPAD,we need to give Proxy location in browser,if user changes to some other Proxy other than our Zentyal Proxy or removes the Proxy settings will he able get internet connection ?

[christian]

When you deploy WPAD, idea behind is to use default browser configuration that is to discover if any proxy is available.
Of course, if user put something else like another or no proxy, Zentyal proxy will not be used. But here again, idea is to block (using firewall) access to anything else that Zentyal proxy so that you keep everything under control.

[Zent User]

Means even user changes the Proxy settings,we have to control at Firewall level,right ?

[christian]

It means that if you want to ensure that users are using your proxy, you have to make this proxy the only available service for them, therefore preventing them to either define another one (this would mean to control all workstations but it looks like you are not yet at this stage) or to block other requests at firewall level.
This is not proxy only related.

Think about mail service: if you want to ensure that user are only using your local mail server, you will have to ensure that they can't connect to external mail server, meaning to control it at firewall level.

[Zent User]

Is wpad.dat contains JavaScript code ?

[christian]

Why such a question?
And you also didn't read documentation or even link I provided 
As far as I remember, it contains wpad.dat (or proxy.pac) example. No js inside.

[Zent User]

Don't mind Christian,when I went through different documents I found that,"we can have flexibility of the JavaScript language",So I've just raised the question to clarify myself.One of the link which I found on net is http://findproxyforurl.com/example-pac-file/.

[christian]

This link contains all what you need to easily implement