I would like to know if it's possible to make a debian firewall (based
on an iptable script) an ldap client. In fact my problem is that I
have a proxy squid on a DMZ. Squid does have a ldap_auth package, but,
as my firewall does @ translation, i'm wondering how squid could know
which user is connecting to him.
I am also thinking about using ebtables to make a firewalling bridge
instead of iptables, but would it be the solution? Would the proxy
recognize users in that case and could make requests to the ldap
server about theirs permissions?
This is the scheme :
__________
| firewall |____proxy squid
|__________|
|
|
LAN with LDAPserver
I'm wide open to any suggestion, correction or other solutions 'cause
I don't know if I'm on the good way.
Thanks