RE: [squid-users] Extract username and write it to the log file without NTLM?

On Monday 14 June 2004 14:39, Elsen Marc wrote:
> > Hi!
> >
> > Is there any way for squid to "extract" the username that is
> > logged in on
> > particular machine just by using information
> > from the browser?
> >
> > What i basically want to see is username of person that is
> > logged on to the
> > machine which is using the proxy WITHOUT prompting
> > users for "extra authentication", and then write it in the access.log
> > together with all other info (date,dst_url etc).
> >
> > Example:
> >
> > User Bob is logged on to domain/AD. He wants to surf on the
> > internet and
> > starts his MSIE. While he is surfing transparently (no extra auth)
> > i can extract the username he is logged in with on his
> > machine/domain and
> > then log this info into the access.log file.
> >
> > Is it possible?
> > Alternative solution (without using ntlm auth/extra password prompt)?
> >
> > thx
> > Omar
>
> No , because if authentication is not used browers simply (and only)
> 'forward' http requests to SQUID.

This is enough. Devise a way for squid to run some tool which
asks Windoze boxes about logged in user, process and log result.
You can use Samba:

# nmblookup -A 172.16.42.68
added interface ip=172.16.42.177 bcast=172.16.42.255 nmask=255.255.255.0
Socket opened.
Looking up status of 172.16.42.68
        HOSTNAME <00> - M <ACTIVE>
        WORKGROUP <00> - <GROUP> M <ACTIVE>
        HOSTNAME <03> - M <ACTIVE>
        HOSTNAME <20> - M <ACTIVE>
        WORKGROUP <1e> - <GROUP> M <ACTIVE>
        USERNAME <03> - M <ACTIVE>
        ^^^^^^^^

--
vda