Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I just set up my dante socks proxy and it works just fine without authentication. Now I want only certain users to be able to use it tho. Preferably only those users that are in the passwd. What would you guys recommend me using? Can I somehow use PAM and link it to my passwd? What other authentication is there and how would they work? For example would an authentication window pop up, before the user would be able to browse?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

If you want to allow all users from your passwd, and only them, you can simply say:

method: username

But if you decide to have all the PAM features, modules and hassle:

method: pam
pam.servicename: sockd_myservice

In PAM you need to configure a new stack for "sockd_myservice", look for example how "ssh" service is configured to allow sshd to use PAM.

Pre-requisite to either username or pam methods is:

user.privileged    : root
user.notprivileged : socks     # some non-root user name
share|improve this answer
    
I actually like the first approach that only users in my passwd will be able to use the proxy. I set the method: username and delete the 'none' behind it. Now when I set the proxy server and port in my Firefox I'm just not able to load any page. It doesn't prompt me to type in username and password. So how exactly does the passwd approach work? –  cherrun Feb 3 '12 at 0:10
    
This answer is about server-side of the socks protocol. Yes, the client side should deliver username/password in both cases (method:pam and method:username). Firefox doesn't know how to do this bugzilla.mozilla.org/show_bug.cgi?id=122752, not good. You need to socksify it or socksify the whole system. –  kubanczyk Feb 3 '12 at 17:48
    
Alright, I'll try that. Thanks. –  cherrun Feb 4 '12 at 11:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.