Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have to configure squid authentication + dansguardian web filtering on ubuntu server. Can anyone please tell me how to do it.

I can configure squid transparent mode & dansguardian. But I do not know how to configure squid authentication and making users to get authenticated to browse.

The authentication is to be done with microsoft windows active directory. Can anyone please help me.

share|improve this question

This depends on what you're authenticating against. For example, I once got squid to authenticate against a Mac OS X Open Directory server (effectively LDAP).

A few tips to get you started:

  • Transparent proxying and authenticated proxying are mutually exclusive. You can have either one, but not both.
  • Look for squid.conf on your Ubuntu server. That is what you'll have to edit in order to make the authentication lookups against your LDAP (or NTLM or ...) server.
  • Figure out how to get your proxy's IP (or FQDN) and port into your workstations. If there are very few, you can manually configure them. Windows and Mac OS X can be configured with Group Policies and Workgroup Manager (a.k.a. MCX).
  • Once Squid has authentication, it will pass that through DansGuardian. No additional configuration in DansGuardian should be necessary.
  • Check this web page for lots of details:

Hope that helps!

share|improve this answer
+1 for "transparent proxying and authenticated proxying are mutually exclusive". – Massimo Jul 11 '11 at 6:09
up vote 0 down vote accepted

I integrated squid with Active Directory using this link :

share|improve this answer

The following how to shows Squid + Kerberos with AD + web filtering done by qlproxy.

share|improve this answer
Are you affiliated with qlproxy? You gave 5 answer in a row referring to this product – user130370 Dec 19 '13 at 10:14
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. – Scott Pack Dec 19 '13 at 13:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.