Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In my college's computer lab, I want to configure the computers in such a way that whenever a user tries to use the Internet in that lab they are asked to authenticate (provide a username / password) themselves through my computer. Only then they are allowed to use the internet.

I want to implement this using networking techniques and concepts of some kind -- what would be appropriate?

share|improve this question

migrated from stackoverflow.com Nov 5 '09 at 7:30

This question came from our site for professional and enthusiast programmers.

add comment

3 Answers

Setup a proxy server like squid. Require authentication. Configure the browser on all the computers to use your proxy server. If possible use a firewall to block all http connections that do not go through your cache.

Here is a section from the squid faq that describes how to use authentication.

share|improve this answer
    
+1 for squid, first thing I thought of too. –  Coops Nov 5 '09 at 8:51
add comment

I think what you are talking about here is an authenticating proxy server? Microsoft's offering is the ISA Server, but there are also plenty of free ones out there.

share|improve this answer
add comment

Given how you asked the question, I suspect that this approach is beyond your authority and access to implement, but I believe one of the most standard, secure, and compatible methods to do this is through 802.1X, the IEEE standard "port network access control" protocol.

Be warned that it involves implementing many nontrivial services, like a proper PKI and RADIUS setup, so it is not an easy road.

However, it will be more secure and much more reliable than a simple HTTP proxy / captive gateway system.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.