From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <hlodin@komo.ua>
From: "=?utf-8?b?0JPQu9C+0LTQuNC9?= =?utf-8?b?INChLtCSLg==?=" <hlodin@komo.ua>
To: ALT Linux Community general discussions <community@lists.altlinux.org>
Date: Thu, 15 Nov 2007 10:56:25 +0200
User-Agent: KMail/1.9.7
References: <E1IrpzM-000Bmc-00.chelroot74-mail-ru@f114.mail.ru>
	<38121c4f0711122340h44c50b19pfa2976112e8ceb9@mail.gmail.com>
In-Reply-To: <38121c4f0711122340h44c50b19pfa2976112e8ceb9@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
Message-Id: <200711151056.26806.hlodin@komo.ua>
X-Virus-Scanned: amavisd-new at komo.ua
Subject: Re: [Comm] Server 4.0 + squid + pam_auth
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ALT Linux Community general discussions
	<community@lists.altlinux.org>
List-Id: ALT Linux Community general discussions <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Nov 2007 08:56:39 -0000
Archived-At: <http://lore.altlinux.org/community/200711151056.26806.hlodin@komo.ua/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

вівторок, 13-лис-2007, Voffka Putinin написав:
> Виталий,
>
>   а при чём тут digest и ncsa? В теме же написано - pam_auth. Чтобы при
> создании пользователя он мог и по sftp заходить, и почтой пользоваться, и
> интернетом через прокси - и для этого не нужно было заводить разные пароли
> разными способами - а просто добавить юзера локального. Вот в чём задача...

$ cat /etc/pam.d/squid
auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_stack.so service=system-auth

$ fgrep 'auth_param basic' /etc/squid/squid.conf
auth_param basic program /usr/lib/squid/pam_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive on

$ stat /usr/lib/squid/pam_auth
  File: `/usr/lib/squid/pam_auth'
  Size: 10496           Blocks: 24         IO Block: 4096   regular file
Device: 801h/2049d      Inode: 3769639     Links: 1
Access: (4755/-rwsr-xr-x)  Uid: (    0/    root)   Gid: (   27/    auth)

-- 
С уважением,
               С.В. Глодин