Add create cche

This commit is contained in:
fredbcode committed 2021-11-22 12:21:36 +01:00
1 parent 35a3d1783c
commit 898ef49f6f
268 files changed
+27363 -19

No files matched your search

@@ -0,0 +1,19 @@
# IP/DNS-based auth plugin
#
# Obtains user and group from domain entry maintained by separate authentication# program.
plugname = 'dnsauth'
# Base DNS domain
#basedomain = "my.privatedomain"
# Authentication URL
#authurl = "http://192.168.1.3/auth/login/login.pl?url"
# Prefix for auth URLs
#prefix_auth = "http://192.168.1.3/auth/"
# Redirect to auth (i.e. log-in)
# yes - redirects to authurl to login
# no - drops through to next auth plugin
redirect_to_auth = "yes"
+23
View File
@@ -0,0 +1,23 @@
# Ident auth plugin
# Identifies users via IDENT servers running on client machines
plugname = 'ident'
story_function = 'auth_ident'
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
@@ -0,0 +1,29 @@
# IP-based auth plugin
#
# Maps client IPs to filter groups.
# If "usexforwardedfor" is enabled, grabs the IP from the X-Forwarded-For
# header, if available.
plugname = 'ip'
# ipgroups file - is defined in e2guardian.conf from v5.4
# List file assigning IP addresses, subnets and ranges to filter groups
story_function = 'auth_ip'
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
+24
View File
@@ -0,0 +1,24 @@
# Proxy-Basic auth plugin
# Identifies usernames in "Proxy-Authorization: Basic" headers;
# relies upon the upstream proxy (squid) to perform the actual password check.
plugname = 'pf-basic'
story_function = 'auth_pf_basic'
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
@@ -0,0 +1,24 @@
# IP-Port-based auth plugin
#
# Maps IP Ports to filter groups.
plugname = 'port'
story_function = auth_port
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
+24
View File
@@ -0,0 +1,24 @@
# Proxy-Basic auth plugin
# Identifies usernames in "Proxy-Authorization: Basic" headers;
# relies upon the upstream proxy (squid) to perform the actual password check.
plugname = 'proxy-basic'
story_function = 'auth_proxy_basic'
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
+26
View File
@@ -0,0 +1,26 @@
# Proxy-Digest auth plugin
# Identifies usernames in "Proxy-Authorization: Digest" headers;
# relies upon the upstream proxy (squid) to perform the actual password check.
# Contributed by Darryl Sutherland <darryl@weblink.co.za>
plugname = 'proxy-digest'
story_function = auth_proxy_digest
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
@@ -0,0 +1,34 @@
# Proxy-header auth plugin
# FredB August 2016
# Identifies users with header;
# relies upon the upstream proxy.
# Eg: in groups file
# Mozilla/5.0 (Windows NT 6.1; rv:47.0) Gecko/20100101 Firefox/47.0=filter3
# here:
# header = 'user-agent'
# Firefox 47 + windows is added to group3 without any kind of authentification (! not related with your proxy configuration/identification !)
# THIS IS REALLY INSECURE This can be easily compromised by spoofing the Origin header
# low case
header = ''
plugname = 'proxy-header'
story_function = auth_proxy_header
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup
+24
View File
@@ -0,0 +1,24 @@
# Proxy-NTLM auth plugin
# Identifies usernames in "Proxy-Authorization: NTLM" headers;
# relies on the upstream proxy (squid) to perform the actual password check.
plugname = 'proxy-ntlm'
story_function = auth_proxy_ntlm
# This defines the storybaord function in pre-auth.story
# which determines the filter group used.
# Default group settings for this plug-in
# If these are set group determination will always succeed
# and auth plug-in scan will stop
# even if the user is not found in group list(s)
# These settings override the global defaultfiltergroup and
# defaulttransparentfiltergroup settings for this plug-in only.
#defaultfiltergroup = 1
# This applies to explict proxy and icap requests
#defaulttransparentfiltergroup = 2
# This appies to transparent requests (http & https)
# Note if not defined does NOT default to defaultfiltergroup