playbooks/trixie
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable firewall activation for exam-mode

Browse source 
For working exam-mode we need to block direct internet access by firewall.
Users have to use squid-proxy on firewall, which can be disabled for exam-users.
To allow VM-traffic (anonymous user), we use a local squid server with users
kerberos-ticket to authenticate on the parent squid.

When using VMs on teacherdevices offsite, the local squid has to use direct internet access.
So we need two squid configs. When switching between offsite and onsite,
the squid has to be restartet with corresponding config.
This commit is contained in:
Raphael Dannecker 2024-12-11 13:09:30 +01:00
parent 99d7bd64db
commit 23a9b6ff97
6 changed files with 46 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/lmn_vm/templates/squid-usermode.conf.j2
View file

@ -1,7 +1,7 @@
acl local-servers dstdomain .{{ domain }}
cache_peer firewall.{{ domain }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
never_direct deny local-servers
always_direct allow all
never_direct allow all
#access_log stdio:/tmp/access.log squid
access_log none
cache_log /dev/null