casit
asked on
Log all websites in proxy OS X Server
Hello,
I'm running a new OS X leopard server. I will be running open directory on it and having client machines authenticate using unique usernames in order to get on the network.
I'm thinking I need to run some sort of proxy server on the os x server in order to grab all the requests. I don't need it to do content/web filtering though. I do that further upstream to my internet pipe.
I need to be able to pull a report showing all websites a certain login went to in a certain day. I can build the interface its more of just storing the username->website information.
I'm running a new OS X leopard server. I will be running open directory on it and having client machines authenticate using unique usernames in order to get on the network.
I'm thinking I need to run some sort of proxy server on the os x server in order to grab all the requests. I don't need it to do content/web filtering though. I do that further upstream to my internet pipe.
I need to be able to pull a report showing all websites a certain login went to in a certain day. I can build the interface its more of just storing the username->website information.
ASKER
They are all os x clients.
There are Mac OS X ports of both Squid and Analog (see below), you may also with to have a quick look at surftrackr, as an alternative to analog, see http://www.surftrackr.net/blog/view/40/screenshots-how-use-surftrackr/
http://mac.softpedia.com/get/Internet-Utilities/SquidMan.shtml
analog "http://www.hmug.org/analog.php"
http://mac.softpedia.com/get/Internet-Utilities/SquidMan.shtml
analog "http://www.hmug.org/analog.php"
ASKER
I'm more interested in how to control access. In my dreams I would prefer saying having an internet group on open directory and whatever users inside that group get access and if you aren't in the group you don't get access.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
analog is a reporting tool that also consumes squid logs
squid can filter something, but for example you might need to integrate external ClamAV
you can do transparent auth with AD if most people are on Windows