Hi!
I've been reading the docs but can't find specifically what I am looking for. Perhaps you wouldn't mind suggesting a way to accomplish this goal.
We have a couple of multi-user Macs. I have been using the Content Filter to block certain sites and the Protocol filters to block certain apps.
It is getting to a point where I need to be able to do this by user and not IP. The IP wasn't the best solution since DHCP would sometimes give the Mac a different IP address.
I think this works best by explaining by example.
I have blanket blocked YouTube as it is a HUGE time waster for my children. But now my wife complains that she can't see the YouTube news stories on Google News. So I thought perhaps I could block YouTube if users kid1 and kid2 login to the Mac. If Adult1 logs into the Mac, then the content filter doesn't block YouTube.
I assume this has to do with User Authentication, Content Filtering probably using Groups but I can't find enough documentation or examples to tell me it can be done and what I have to do to achieve the goal.
Can this be done?
I've been reading the docs but can't find specifically what I am looking for. Perhaps you wouldn't mind suggesting a way to accomplish this goal.
We have a couple of multi-user Macs. I have been using the Content Filter to block certain sites and the Protocol filters to block certain apps.
It is getting to a point where I need to be able to do this by user and not IP. The IP wasn't the best solution since DHCP would sometimes give the Mac a different IP address.
I think this works best by explaining by example.
I have blanket blocked YouTube as it is a HUGE time waster for my children. But now my wife complains that she can't see the YouTube news stories on Google News. So I thought perhaps I could block YouTube if users kid1 and kid2 login to the Mac. If Adult1 logs into the Mac, then the content filter doesn't block YouTube.
I assume this has to do with User Authentication, Content Filtering probably using Groups but I can't find enough documentation or examples to tell me it can be done and what I have to do to achieve the goal.
Can this be done?
Share this post:
Responses (7)
-
Accepted Answer
-
Accepted Answer
Hi Nuke.
You can do what you want via groups. I would turn off the default filter (set to unfiltered), create two groups; kids - adults; and for kids, add the kids as users, and adults as the adult users.
For each group, configure content filtering accordingly.
Select users for group by clicking on them.
Users are configured in webconfig; be sure to enable proxy service per user.
Requires non-transparent proxy and user authentication.
Based on my understanding and brief experience of content filtering, this should work.
You may also find this post to be of interest:
http://www.clearfoundation.com/component/option,com_kunena/Itemid,232/catid,27/func,view/id,6648/ -
Accepted Answer
Hi nuke,
You are welcome and all I can answer is this ...
What is PDC(Primary Domain Controller):
- Webopedia
- Wikipedia
Here is how to activate it on ClearOS:
- Windows Networking
Not sure how this relates to a Mac
AFAIK, it is a way to determine the rights someone gets when logging on.
Roaming Profiles:
- Wikipedia
AFAIK, this means that depending on what account is used to login, the desktop and rights of this account can be determined.
For the other answers/solutions/alternatives you will have to wait for someone else to respond.
Greetings,
John -
Accepted Answer
Thanks John.
I'm not sure what a PDC actually is.
At the moment each user has an account of the server. But since they don't have to login to the server to get email and surf the web, no one actually logs onto the server. I sort of figured out how the IP related blocking works but in this case I need to be able to block by user regardless of which Mac/Linux box they use.
They do however login to the multi-user Mac because they have to. I presume that there is a way to seamlessly get the Mac:User to login to the server by logging into the Mac user account. But I haven't figured that out yet either.
But if I can't filter by user account in some way, then I don't know how this should work. -
Accepted Answer
Hi nuke,
I think this can be achieved when you use ClearOS as a PDC (with roaming profiles) and use login scripts, but I cannot tell you how to create those login scripts.
The only alternative that I do know about is start using fixed ip addresses for your clients, so that at least from specific clients the access will be blocked or not.
Otherwise I would not know, but probably someone else will.
Greetings,
John
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »