Author Topic: Logging squid users  (Read 1952 times)

azop

  • Zen Monk
  • **
  • Posts: 53
  • Karma: +0/-0
    • View Profile
Logging squid users
« on: May 02, 2008, 09:36:16 pm »
We are setup using transparent proxying (I know...this causes issues with authentication)

Any suggestions for logging pages that users access?  The boss wants this ability to see who did what and when.  Obviously date / time and username (windows login name).  I'm using samba as the only PDC so I have no Windows Active Directory server to authenicate against.

I'm not totally against installing identd...all users are NAT.

sixstone

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1417
  • Karma: +26/-0
    • View Profile
    • Sixstone's blog
Re: Logging squid users
« Reply #1 on: May 03, 2008, 10:51:45 am »
If you're using transparent proxy, you may enable log for squid module (Logs -> Configure Logs). Then you will able to see which IP is accessing what (Logs -> Query Logs). There are two problems here:
  • Associated an IP to a fixed user, to do so you may use the fixed addresses mapping in the DHCP server
  • The SSL-based traffic through https cannot be proxied since it's crypted from the source to the target

I hope this helps.
My secret is my silence...