This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Username rather than ip in logfiles?

Is there a way to log usernames (win2k) rather than ipdresses in astaro logfiles?

I guess not. If so, then what is the best practise if you have got multiple, roaming users on your LAN and need to track what they are browsing?

To be sure on which users has got which IP at a given moment seem to be to difficult. Or?

Regards, Lars.

This thread was automatically locked due to age.

0 oliver.desch over 22 years ago

Lars Bonnesen,

make sue that your user access the internet via
http proxy only and enable user authentication.
As result you'll receive detailed proxy usage reports
per user!

read you
o|iver
Cancel
Vote Up 0 Vote Down

Cancel
0 Lars Bonnesen over 22 years ago in reply to oliver.desch

Yes. They access web pages through the http proxy, but without authentication.

If I need them to authenticate, won't I have to make a lot of users on the firewall? Or can I have them to authenticate via the DC?

Regards, Lars
Cancel
Vote Up 0 Vote Down

Cancel
0 Mark B over 22 years ago in reply to Lars Bonnesen

Lars,

I believe you will need to have your users authenticate themselves to have their names appear in the logfile.

If you are running a WK2 server, install the radius server (IAS) ... and follow the FAQ for this found on the docs server. It works really well and cuts down on heaps of "admin" time.

Hope this helps!
Cancel
Vote Up 0 Vote Down

Cancel
0 Lars Bonnesen over 22 years ago in reply to Mark B

The radius sounds like the correct solution.

Is the license included in win2k?

Regards, Lars.
Cancel
Vote Up 0 Vote Down

Cancel
0 Lars Bonnesen over 22 years ago in reply to Lars Bonnesen

One more question:

I got it working using authentication against the SAM database. But the users will have to enter their usernames (again) when opening a webbrowser.

Will using a RADIUS server free the users from actually have to type username and password again (other than when they logon the LAN)?

If not... is there another way to log usernames into the http proxy log without having them to authenticate another time (beside when they log on to the LAN?

Regards, Lars.
Cancel
Vote Up 0 Vote Down

Cancel
0 oliver.desch over 22 years ago in reply to Lars Bonnesen

Lars,

sorry no way - the proxy cannot act as an oracle

read you
o|iver
Cancel
Vote Up 0 Vote Down

Cancel
0 Lars Bonnesen over 22 years ago in reply to oliver.desch

No, of course not. I was thinking if it was possible for the proxy to snap the username in some way. Well, on the other hand, this could naturly be a potentiel security issue.

Regards, Lars.

[size="1"][ 03 November 2002, 04:03: Message edited by: Lars Bonnesen ][/size]
Cancel
Vote Up 0 Vote Down

Cancel