Dynamically configure different DNS server based on user login.

I've got two young sons and I'm looking to reconfigure the 'Family' desktop to give the older son his own user account.
I've only recently started with Arch on my personal netbook so the family desktop is still running Ubuntu.  That will likely change next clean install though.
I'd like to set the DNS to OpenDNS 'family shield' for his usage but allow full access via a different DNS server such as google DNS (for example) for parental use without filtering.
I'd like this to switch auto magically based on the user login credentials if possible.
I understand the limitations of DNS filtering but my oldest son has never even heard of DNS much less being able to figure out how to circumvent it yet.  I'll deal with that in several years when it becomes an issue...
Can anyone point me in the right direction?

bergersau wrote:Thanks,
It looks like I might have to set up a squid proxy with Dan's Guardian.  I was hoping for a simpler solution though.
Dan's Guardian is going to be a whole lot simpler than hacking the system resolver to use different servers for different users.
You MIGHT be able to hack something with iptables, the NAT table and a DNAT in conjunction with the 'owner' module... Something like:
Set your "unrestricted" DNS server in /etc/resolv.conf and a rule like below...
I'll assume you set the Google servers; 8.8.8.8 and 8.8.4.4 and your son's usernames are 'brad' and 'tony'
iptables -t nat -A POSTROUTING -d 8.8.8.8 -m owner --uid-owner brad -j dnat --to 208.67.222.222
iptables -t nat -A POSTROUTING -d 8.8.4.4 -m owner --uid-owner brad -j dnat --to 208.67.220.220
iptables -t nat -A POSTROUTING -d 8.8.8.8 -m owner --uid-owner tony -j dnat --to 208.67.222.222
iptables -t nat -A POSTROUTING -d 8.8.4.4 -m owner --uid-owner tony -j dnat --to 208.67.220.220
Untested and I don't guarantee that will work. You could tidy it up and bit using subchains etc, but I'll leave that as an exercise for the reader.... And I'd still recommend a filtering proxy over the above....

Similar Messages

  • Proper Configuration of DNS server for our new branch office

    Hi All,
    Our new office will setup a new branch office with a routed network link to our HO. In HO, we have 2 domain controllers configured as AD and DNS just for fail over scenarios.
    How will we configure the DNS server of our 3rd domain controller which we will placed in the new branch office. What would be the proper settings of DNS server integrated to AD to work well especially to have a successful replication and communication to
    the 2 DC's located in HO?

    Hi,
    If you have multiple DC's in that site i would recommend using any of the partner DC's IP addresses as preferred one and secondary DNS IP to pointing to itself. Dont use loopback addresses configure it with actual IP addresses.
    If you have only one server in branch office point itself as the primary DNS and HO DC as secondary and tertiary.
    Make sure that all clients in your branch site are pointing to the branch DC as primary DNS server.
    Regards,
    Rafic
    If you found this post helpful, please give it a "Helpful" vote.
    If it answered your question, remember to mark it as an "Answer".
    This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

  • How to determine Organizational Data based on User Login

    Dear all,
    How to determine organizational data based on user login in Activity transaction, currently org determination is happening after entering customer number in the transaction.
    We have used 'Responsibility' determination rule for this configuration. Now the requirement is to determine org data based on user login.
    In Org model we have assigned user to org data through a business partner. But still org data is not getting determined in the transaction.
    Please help me to trace out the problem.. your suggestions will be highly appreciated.
    Best regards
    Raghu ram

    You just have to use other organization determination rule. In your case this would be rule 10000194 (ORGMAN_12). This determination rule delivers the responsible organizational unit of the user
    User is defined as a business partner in the container attribute 'PARTNER'. If not, the system user (sy-uname) is used.
    So you have to do the following:
    - use this determination rule
    - in BP link username with employee
    - assign in PPOMA_CRM employee or user to organizational unit
    This should solve your problem.

  • How to display filtered data based on user login

    We have a SSRS report (.rdlc) which gives the report about Online count of machines. Report is incoperayed in Asp.net.
    We have many filters in This report. Now we have to retrict the report based on user login to the application .
    For ex: report has a drop down for Regional Admin. Now if one person login to the application he has to view only his region online count.
    How can we do this in SSRS?. We have our application hosted in Microsoft Azure . Please suggest

    Hi csmbrnoc,
    In Reporting Services, if we want to filter data based on user login, then there must be some relationship between the UserID and the Region in the dataset. For example, there is a field named UserID in the dataset, and each ID map some region and the corresponding
    “Online count of machines”. In this scenario, just as Visakh suggested, we can use built-in field User!UserID to obtain UserID of the current user, then directly add a filter to the dataset as below:
    Expression: [UserID]
    Operator: =
    Value: [&UserID]
    If there are any other questions, please feel free to let me know.
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • Preoblem with Browse facility in Terminal Server with Normal User Login!!!

    Hii All,
           I am facing a problem with my addon in which I am using browsing facility.
           But the Browse facility is working properly  in Terminal Server with Administrator Login, but not working in Terminal Server with Normal User Login.
           So how it can be solved?
    Thanks & Regards,
    Nabanita
    Edited by: ghosh.nabanita on Aug 9, 2011 12:47 PM
    Edited by: ghosh.nabanita on Aug 9, 2011 1:46 PM

    Hi,
    You have to check group polices if browsing is enabled.
    Check this thread:
    http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/336377db-e0cb-4c8e-b7c7-01b7c11c0e27/

  • Access/set dynamic configuration in client/server abap proxy

    Hi,
    I have 2 question regarding reading/setting dynamic configuration in ABAP proxies:
    1) Is it possible to set dynamic configuration objects in a server abap proxy (SAP --> XI)?
    When looking at the class CL_PROXY_FRAMEWORK is looks as if it is possible. This class has en attribute IF_XMS_MAIN~DY which is a reference to the class CL_XMS_MSGHDR30_DYNAMIC.
    I'm not sure if I'm supposed to try and access the dynamic configuration objects via this class or if I'm supposed to use the GET_PROTOCOL method in some manner as suggested by:
    http://help.sap.com/saphelp_nw04s/helpdata/en/51/d5cd16235e4643ae8ec92395c4ad97/frameset.htm
    Above link is for client proxies not server, and I've been unable to find any documentation on this for server proxies.
    2) The same question goes for server proxies (XI --> SAP), though now I would like to set some dynamic configuration data.
    This I believe should be done using get_protocol( if_wsprotocol=>ws_header ) as indicated by before mentioned link.
    However in both cases I'm not sure of if it is indeed possible and which road to choose for sure. So a hint or 2 would be really nice.
    Best Regards,
    Daniel
    ps. maybe I should just mention that I am pretty new to the ABAP world, so bear with me.

    The link that you gave does give you an example for both server and client proxies:
    Accessing Protocol Classes for Client Proxies
    In client proxies, you access the protocol class by using the GET_PROTOCOL method. Below is an example for the IF_WSPROTOCOL_PAYLOAD protocol:
    DATA:
    lo_clientProxy      TYPE REF TO co_clientProxy,
    lo_payload_protocol TYPE REF TO if_wsprotocol_payload
    lo_payload          TYPE REF TO if_ws_payload.
    CREATE OBJECT lo_clientProxy.
    Get Protocol Class Using Method GET_PROTOCOL
    lo_payload_protocol ?=
           lo_clientProxy->get_protocol( if_wsprotocol=>payload ).
    CALL METHOD lo_clientProxy->execute_synchronous
                EXPORTING output  = ls_request
                IMPORTING input   = ls_response.
    Use Protocol Methods
    lo_payload = lo_payload->get_sent_request_payload( ).
    Accessing Protocol Classes for Server Proxies (XI Only)
    Within the implementation of a server proxy, you get the protocol class by using the CL_PROXY_ACCESS=>GET_SERVER_CONTEXT( ) method:
    DATA:  lo_server_context   TYPE REF TO if_ws_server_context,
           lo_payload_protocol TYPE REF TO if_wsprotocol_payload.
    lo_server_context   = cl_proxy_access=>get_server_context( ).
    lo_payload_protocol =
         lo_server_context->get_protocol( if_wsprotocol=>payload ).

  • Dynamic variation of prompt clause based on user selection

    Hi,
    I would like to know if there is any possibility to change the query to have 'IN' clause or '=' clause based on user prompt selection.
    Say, if user enters single value for a prompt, the query should have = clause and when enters multiple input, the query change to IN clause.
    HummingBird tool has the capability to dynamically change between = and IN based on the prompt selection.
    There seems to be some issue in performance because of the IN clause we’ve used while passing single prompt value when compared to Hummingbird tool.
    Is it possible in BI Publisher???

    Hi ,
    It is not possible to select the IN or = based on Prompt selection directly..
    You can Use IN..that will work as = also..
    Thanks,
    Ananth

  • How to get Logo in report dynamically Based on user login?

    requirement is like this:
    same report format will be used by 3 different users, but the different logo should appear based on their login..

    place all 3 images in the template, then wrap an if statement around each. something like:
    <?if:userLogin='User 1'?>image goes here<?end if?>
    if that doesn't work try sticking each in a table with no border and doing the same with the if statements

  • Configuration of DNS server

    Hi Alll, I am a student of Nagpur University, India and much intersted in Solaris OS.... Can anybody mail me complete steps of configuration of DNS ???? my id is [email protected]
    Thanks

    Could this be of some help?
    http://www.google.com/search?hl=en&q=solaris+%2B+dns&btnG=Google+Search

  • Filtering report data based on user login and Parameter fields

    Post Author: mronquillo
    CA Forum: General
    Hi,I am running a report that filters data based on the user login. To do this, I created a formula called @user that compares the login name (using the CurrentCEUserName field) and returns the user's name. If the user login is not a login specified in the if statements, it returns the parameter field "user_name":For example: if CurrentCEUserName = "loginname1" then "User's Name 1"else if CurrentCEUserName = "loginname2" then "User's Name 2" else if CurrentCEUserName = "loginname3" then "User's Name 3"  else if CurrentCEUserName = "loginname4" then "User's Name 4".. .else {?user_name}   In select expert, I have a condition which filters data based on the string returned from that formula:{Table.Name} = {@user}  This works fine and when the users run the report they only their own data. However, they are still prompted to choose a parameter field regardless if of the value returned by the @user formula. Oddly enough, regardless of what parameter field they choose, they will still only see their own data (i.e. if John chooses "Bob" from the parameter list, he will still only see John's data.)If I remove the "else {?user_name}" line from the @user formula, then the users are not prompted anymore. However, if they are not a "valid" user - that is, if any of the if statements in the formula are not true for their login name - then they will see no data. What I want to do is make the report ONLY prompt the user to choose a parameter field if their login name is not "valid". That is, if the @user formula is able to return a string value for their login name, then they will jump right into the report without being prompted to choose a parameter - otherwise, the user will be prompted to choose a name from the parameter list. I thought my formula would allow this (hence the "else" clause), but it seems that if a parameter field is present in any formula, then the report automatically prompts the user to choose a parameter. Is what I am trying to accomplish possible in CR (I'm using CR v10.0) or is there a better way to do what I am trying to do?Thanks in advance.

    Post Author: sharonmtowler
    CA Forum: General
    try, or something like that
    (if CurrentCEUserName ={?user_name} then true else ({Table.Name} = {@user}) )

  • Filter standard reports based on user login

    Hi All,
    Is there any way to filter standard form reports (not PLD), based on the user currently logged in. for example, if user 'sales1' has logged in,  he should be able to see the sales report(say sales analysis) for the documents made by him only. there does not seem to have any access on the query being passed to this report. so even customization does not seem to be the solution. kindly help if any one knows a better way or a way at all.
    thnks and regards,
    Binita Joshi

    Hi Petr,
    thanks for replying.
    Before posting, I had already searched in SAP B1 forum and there , for a similar problem, it was advised to use SDK so I posted here.
    I knew, SDK seems to be the way. but, again, As I wrote, I wanted to know, whether there exists a way to filter the standard reports based on the user login. I don't want authorization or setting rights, sort of things.
    but, suppose If user A wants to see the sales documents reports then, he should be able to see the reports of the documents made by him only. so we will have to filter the records based on the Usersign field in marketing documents' tables but, I am clueless on, where should I give this filter.  and I am afraid there is no way to do that. make your own reports and block the access of system reports.Pls right back if U have more to say.
    regards,
    Binita Joshi

  • Different password demands after resetting users login password

    iMac 27", Mavericks
    Had to reset users (norm.) password.
    Now user gets demands from Mail, Calendar agent and com.apple.iCloudHelper.xpc where those programs want to use keychain and user must give his password.
    What has happend?
    How to stop these demands?

    Resetting the user login password does not reset the keychain password. You must change the password on the login keychain to match the users new password.
    You can change it in the Keychain Access program.
    If you do not know the users old password, you'll have to reset the login keychain, losing all stored passwords.

  • SQL Server 2012 Always ON routing to particular server based on User Name

    I have configured SQL Server 2012 with AlwaysON availability groups. I could route my connections to Secondary node when I put the applicationintent = readonly on the connection string. However I would like to route all of my connections from particular
    user name to my read only node. How can I accomplish this without changing connection string (Reason is I would like to be able to route connections for read only query to some older application client that doesn't support applicationintent parameter).

    Hello,
    There is nothing built in that will allow you to dynamically re-route connections based on usernames. This may be achieved outside of SQL Server through some sort of network appliance, but I can't say for sure.
    Would it be possible to upgrade the SQL Client (to 2012+) for the old application and then change the connection string?
    Sean Gallardy | Blog |
    Twitter

  • How to make different forms available based on user responses

    I have created 4 fillable application forms in Adobe Acrobat 9 Standard. First time using this product.
    Boss wants a dynamic form, so that if a user answers Yes to a question in Form A, then Form B is automatically inserted into Form A for the user to complete. If they answer No, then they continue in Form A, until questions prompting them Yes/No for Form C and Yes/No for Form D.
    We believed that this might be possible if we upgraded to Acrobat Acrobat 9 Pro, with the LiveCycle Designer ES 8.2.1 bundled in.
    I have looked at Pro and can't figure it out, and I've looked at LiveCycle Designer ES 8.2.1 and am completely confused as it is so different.
    Saw a tutorial that said to go to Tools and use the Action Builder, but I don't have this option in my version. Not sure why?
    We want users to be able to use Reader to complete and save the form, and print it for mailing, emailing or faxing to us.
    Any guidance or suggestions, or advice on recommended books, tutorials, or training would be appreciated.
    We are in Ontario, Canada.
    Thanks

    Hello,
    We had a similar requirement.
    The best way we found was to implement the enhancement spot in the beginning of method LOCK_ORDERS of class CL_CRM_METHODS_BTIL. Here, you can prevent the user from editing a business transaction. Be aware this method is called for any BT, so you need to adjust your custom development accordingly.
    Hope this helps.
    Best regards,
    Sylvain AGUETTAZ

  • Configure JDeveloper ADF Project based on user properties

    I have my own project code tree and would like to create a JDeveloper Project based on that. Is there a way to instruct JDeveloper to read the source file locations from a properties file.
    For example, look into \trunk\jsp_src for all the jsf files ; look into \trunk\config\webWEB-INF for config files like faces-config.xml ...etc.
    Thanks
    Ramesh

    Hi Shay,
    I know we can do it this way.
    What I would like to find out is if there is a way to tell JDeveloper to read all the configuration information from a user-defined properties file.
    That way I can use my code tree checked out into any directory structure from source controls like CVS or Subversion as the code-base for my JDeveloper ADF project.
    Thanks
    Ramesh

Maybe you are looking for