mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-22 08:52:58 +02:00
proxy: Add option to require a certain group for Internet access.
This commit is contained in:
@@ -593,6 +593,8 @@ WARNING: untranslated string: advproxy cache-digest
|
||||
WARNING: untranslated string: advproxy errmsg cache
|
||||
WARNING: untranslated string: advproxy errmsg invalid upstream proxy
|
||||
WARNING: untranslated string: advproxy errmsg proxy ports equal
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: advproxy proxy port transparent
|
||||
WARNING: untranslated string: atm device
|
||||
WARNING: untranslated string: attention
|
||||
|
||||
@@ -603,6 +603,8 @@ WARNING: untranslated string: advproxy cache-digest
|
||||
WARNING: untranslated string: advproxy errmsg cache
|
||||
WARNING: untranslated string: advproxy errmsg invalid upstream proxy
|
||||
WARNING: untranslated string: advproxy errmsg proxy ports equal
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: advproxy proxy port transparent
|
||||
WARNING: untranslated string: atm device
|
||||
WARNING: untranslated string: attention
|
||||
|
||||
@@ -656,6 +656,8 @@ WARNING: untranslated string: administrator password
|
||||
WARNING: untranslated string: administrator username
|
||||
WARNING: untranslated string: advproxy AUTH method ntlm
|
||||
WARNING: untranslated string: advproxy AUTH method ntlm auth
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: atm device
|
||||
WARNING: untranslated string: bytes
|
||||
WARNING: untranslated string: capabilities
|
||||
|
||||
@@ -593,6 +593,8 @@ WARNING: untranslated string: advproxy cache-digest
|
||||
WARNING: untranslated string: advproxy errmsg cache
|
||||
WARNING: untranslated string: advproxy errmsg invalid upstream proxy
|
||||
WARNING: untranslated string: advproxy errmsg proxy ports equal
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: advproxy proxy port transparent
|
||||
WARNING: untranslated string: atm device
|
||||
WARNING: untranslated string: attention
|
||||
|
||||
@@ -596,6 +596,8 @@ WARNING: untranslated string: advproxy cache-digest
|
||||
WARNING: untranslated string: advproxy errmsg cache
|
||||
WARNING: untranslated string: advproxy errmsg invalid upstream proxy
|
||||
WARNING: untranslated string: advproxy errmsg proxy ports equal
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: advproxy proxy port transparent
|
||||
WARNING: untranslated string: atm device
|
||||
WARNING: untranslated string: attention
|
||||
|
||||
@@ -655,6 +655,8 @@ WARNING: untranslated string: administrator password
|
||||
WARNING: untranslated string: administrator username
|
||||
WARNING: untranslated string: advproxy AUTH method ntlm
|
||||
WARNING: untranslated string: advproxy AUTH method ntlm auth
|
||||
WARNING: untranslated string: advproxy group access control
|
||||
WARNING: untranslated string: advproxy group required
|
||||
WARNING: untranslated string: bytes
|
||||
WARNING: untranslated string: capabilities
|
||||
WARNING: untranslated string: default
|
||||
|
||||
@@ -23,6 +23,8 @@
|
||||
< advproxy errmsg cache
|
||||
< advproxy errmsg invalid upstream proxy
|
||||
< advproxy errmsg proxy ports equal
|
||||
< advproxy group access control
|
||||
< advproxy group required
|
||||
< advproxy proxy port transparent
|
||||
< age second
|
||||
< age seconds
|
||||
@@ -551,6 +553,8 @@
|
||||
< advproxy errmsg cache
|
||||
< advproxy errmsg invalid upstream proxy
|
||||
< advproxy errmsg proxy ports equal
|
||||
< advproxy group access control
|
||||
< advproxy group required
|
||||
< advproxy proxy port transparent
|
||||
< age second
|
||||
< age seconds
|
||||
@@ -1072,6 +1076,8 @@
|
||||
< advproxy errmsg cache
|
||||
< advproxy errmsg invalid upstream proxy
|
||||
< advproxy errmsg proxy ports equal
|
||||
< advproxy group access control
|
||||
< advproxy group required
|
||||
< advproxy proxy port transparent
|
||||
< age second
|
||||
< age seconds
|
||||
@@ -1569,6 +1575,8 @@
|
||||
< advproxy errmsg cache
|
||||
< advproxy errmsg invalid upstream proxy
|
||||
< advproxy errmsg proxy ports equal
|
||||
< advproxy group access control
|
||||
< advproxy group required
|
||||
< advproxy proxy port transparent
|
||||
< age second
|
||||
< age seconds
|
||||
|
||||
@@ -266,6 +266,7 @@ $proxysettings{'LDAP_PORT'} = '389';
|
||||
$proxysettings{'LDAP_BINDDN_USER'} = '';
|
||||
$proxysettings{'LDAP_BINDDN_PASS'} = '';
|
||||
$proxysettings{'LDAP_GROUP'} = '';
|
||||
$proxysettings{'NTLM_AUTH_GROUP'} = '';
|
||||
$proxysettings{'NTLM_DOMAIN'} = '';
|
||||
$proxysettings{'NTLM_PDC'} = '';
|
||||
$proxysettings{'NTLM_BDC'} = '';
|
||||
@@ -1994,6 +1995,27 @@ if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
|
||||
END
|
||||
; }
|
||||
|
||||
# ===================================================================
|
||||
# NTLM-AUTH settings
|
||||
# ===================================================================
|
||||
|
||||
if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth') {
|
||||
print <<END;
|
||||
<hr size ='1'>
|
||||
<table width='100%'>
|
||||
<tr>
|
||||
<td colspan='4'><b>$Lang::tr{'advproxy group access control'}</b></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width='20%' class='base'>$Lang::tr{'advproxy group required'}: <img src='/blob.gif' alt='*' /></td>
|
||||
<td width='40%'><input type='text' name='NTLM_AUTH_GROUP' value='$proxysettings{'NTLM_AUTH_GROUP'}' size='37' /></td>
|
||||
<td> </td>
|
||||
<td> </td>
|
||||
</tr>
|
||||
</table>
|
||||
END
|
||||
}
|
||||
|
||||
# ===================================================================
|
||||
# LDAP auth settings
|
||||
# ===================================================================
|
||||
@@ -3319,7 +3341,15 @@ END
|
||||
|
||||
if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth')
|
||||
{
|
||||
print FILE "auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp\n";
|
||||
print FILE "auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp";
|
||||
if ($proxysettings{'NTLM_AUTH_GROUP'}) {
|
||||
my $ntlm_auth_group = $proxysettings{'NTLM_AUTH_GROUP'};
|
||||
$ntlm_auth_group =~ s/\\/\+/;
|
||||
|
||||
print FILE " --require-membership-of=\"$ntlm_auth_group\"";
|
||||
}
|
||||
print FILE "\n";
|
||||
|
||||
print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
|
||||
}
|
||||
|
||||
|
||||
@@ -266,6 +266,8 @@
|
||||
'advproxy fake useragent' => 'Gefälschter Useragent für externe Web-Sites',
|
||||
'advproxy friday' => 'Fre',
|
||||
'advproxy from' => 'Von',
|
||||
'advproxy group access control' => 'Gruppenbasierte Zugriffskontrolle',
|
||||
'advproxy group required' => 'Erforderliche Gruppe',
|
||||
'advproxy hdd cache size' => 'Cachegröße auf der Festplatte (MB)',
|
||||
'advproxy invalid num of children' => 'Ungültige Anzahl der Filter-Prozesse',
|
||||
'advproxy log enabled' => 'Protokoll aktiviert',
|
||||
|
||||
@@ -266,6 +266,8 @@
|
||||
'advproxy fake useragent' => 'Fake useragent submitted to external sites',
|
||||
'advproxy friday' => 'Fri',
|
||||
'advproxy from' => 'From',
|
||||
'advproxy group access control' => 'Group based access control',
|
||||
'advproxy group required' => 'Required group',
|
||||
'advproxy hdd cache size' => 'Harddisk cache size (MB)',
|
||||
'advproxy invalid num of children' => 'Invalid number of filter processes',
|
||||
'advproxy log enabled' => 'Log enabled',
|
||||
|
||||
Reference in New Issue
Block a user