Re: [squid-users] SQUID authentication via PAM

Have you installed pam_auth SUID root? To access /etc/shadow it must be
running as root..

--
Henrik Nordstrom
Squid hacker
Kristina Mpoyi-Mpoyi wrote:
> 
> Hello.
> I am trying to get squid to authenticate with
> /etc/shadow via pam.
> 
> I have squid-2.3.STABLE4.tar.gz installed on
> Solaris 7 sparc. I completed the steps below.
> When I manually execute pam_auth my username
> and password gets authenticated correctly against
> /etc/shadow. However, when I try to authenticate
> through squid, authentication fails.
> 
> Any hints would be greatly appreciated,
> 
> Kristina
> 
> --------------------------------------------
> (1)$B!!(BEdit squid.conf
> % vi /usr/local/squid/etc/squid.conf
> authenticate_program /usr/local/squid/bin/pam_auth
> 
> (2)  Edit /etc/pam.conf
> squid auth required /usr/lib/security/pam_unix.so.1 shadow nullok
> squid account required /usr/lib/security/pam_unix.so.1
> 
> (3) Change permissions of pam_auth
> % suid /usr/local/squid/bin/pam_auth
> % chmod 7755 /usr/local/squid/bin/pam_auth
> % ls -l /usr/local/squid/bin/pam_auth
> -rwsr-sr-t 1 nobody nogroup  pam_auth
> 
> (4) Test to see if pam_auth works
> % /usr/local/squid/bin/pam_auth
> username password
> OK
> ------------------------------------------