Community Forum

nuke
nuke
Offline
Resolved
0 votes
Hi!

I've been reading the docs but can't find specifically what I am looking for. Perhaps you wouldn't mind suggesting a way to accomplish this goal.

We have a couple of multi-user Macs. I have been using the Content Filter to block certain sites and the Protocol filters to block certain apps.

It is getting to a point where I need to be able to do this by user and not IP. The IP wasn't the best solution since DHCP would sometimes give the Mac a different IP address.

I think this works best by explaining by example.

I have blanket blocked YouTube as it is a HUGE time waster for my children. But now my wife complains that she can't see the YouTube news stories on Google News. So I thought perhaps I could block YouTube if users kid1 and kid2 login to the Mac. If Adult1 logs into the Mac, then the content filter doesn't block YouTube.

I assume this has to do with User Authentication, Content Filtering probably using Groups but I can't find enough documentation or examples to tell me it can be done and what I have to do to achieve the goal.

Can this be done?
Thursday, April 01 2010, 07:47 PM
Share this post:
Responses (7)
  • Accepted Answer

    nuke
    nuke
    Offline
    Sunday, April 04 2010, 10:09 PM - #Permalink
    Resolved
    0 votes
    I've not had a chance to try your suggestions with Easter getting in the way.

    I'll try over the next day or two.
    The reply is currently minimized Show
  • Accepted Answer

    kbricked
    kbricked
    Offline
    Saturday, April 03 2010, 05:34 PM - #Permalink
    Resolved
    0 votes
    Any luck with this?
    The reply is currently minimized Show
  • Accepted Answer

    kbricked
    kbricked
    Offline
    Thursday, April 01 2010, 10:14 PM - #Permalink
    Resolved
    0 votes
    Hi Nuke.

    You can do what you want via groups. I would turn off the default filter (set to unfiltered), create two groups; kids - adults; and for kids, add the kids as users, and adults as the adult users.

    For each group, configure content filtering accordingly.

    Select users for group by clicking on them.

    Users are configured in webconfig; be sure to enable proxy service per user.

    Requires non-transparent proxy and user authentication.

    Based on my understanding and brief experience of content filtering, this should work.

    You may also find this post to be of interest:
    http://www.clearfoundation.com/component/option,com_kunena/Itemid,232/catid,27/func,view/id,6648/
    The reply is currently minimized Show
  • Accepted Answer

    John
    John
    Offline
    Thursday, April 01 2010, 09:53 PM - #Permalink
    Resolved
    0 votes
    Hi nuke,

    You are welcome and all I can answer is this ...
    What is PDC(Primary Domain Controller):
  • Webopedia

  • Wikipedia

  • Here is how to activate it on ClearOS:
  • Windows Networking
    Not sure how this relates to a Mac

  • AFAIK, it is a way to determine the rights someone gets when logging on.

    Roaming Profiles:
  • Wikipedia

  • AFAIK, this means that depending on what account is used to login, the desktop and rights of this account can be determined.

    For the other answers/solutions/alternatives you will have to wait for someone else to respond.

    Greetings,

    John
    The reply is currently minimized Show
  • Accepted Answer

    nuke
    nuke
    Offline
    Thursday, April 01 2010, 09:21 PM - #Permalink
    Resolved
    0 votes
    Thanks John.

    I'm not sure what a PDC actually is.

    At the moment each user has an account of the server. But since they don't have to login to the server to get email and surf the web, no one actually logs onto the server. I sort of figured out how the IP related blocking works but in this case I need to be able to block by user regardless of which Mac/Linux box they use.

    They do however login to the multi-user Mac because they have to. I presume that there is a way to seamlessly get the Mac:User to login to the server by logging into the Mac user account. But I haven't figured that out yet either.

    But if I can't filter by user account in some way, then I don't know how this should work.
    The reply is currently minimized Show
  • Accepted Answer

    kbricked
    kbricked
    Offline
    Thursday, April 01 2010, 08:40 PM - #Permalink
    Resolved
    0 votes
    Edit:
    D'oh! Good question. I'm not sure. :)
    The reply is currently minimized Show
  • Accepted Answer

    John
    John
    Offline
    Thursday, April 01 2010, 07:58 PM - #Permalink
    Resolved
    0 votes
    Hi nuke,

    I think this can be achieved when you use ClearOS as a PDC (with roaming profiles) and use login scripts, but I cannot tell you how to create those login scripts.
    The only alternative that I do know about is start using fixed ip addresses for your clients, so that at least from specific clients the access will be blocked or not.
    Otherwise I would not know, but probably someone else will.

    Greetings,

    John
    The reply is currently minimized Show
Your Reply