.TH pam_auth 8 "5 Sep 2003" "Squid PAM Auth"..SH NAMEpam_auth - Squid PAM authentication helper..SH SYNOPSISsquid_pam_auth [-n "service name"] [-t TTL] [-o] [-1]..SH DESCRIPTIONThis helper allows Squid to connect to a mostly any available PAMdatabase to validate the user name and password of Basic HTTPauthentication...TP.BI "-s " "service-name"Specifies the PAM service name Squid uses, defaults to "squid"..TP.BI "-t " TTLEnables persistent PAM connections where the connection to the PAMdatabase is kept open and reused for new logins. The TTL specifieshow long the connetion will be kept open (in seconds).  Default isto not keep PAM connections open. Please note that the use ofpersistent PAM connections is slightly outside the PAMspecification and may not work with all PAM configurations...TP.BI "-o"Do not perform the PAM account management group (accountexpiration etc)..SH CONFIGURATION.The program needs a PAM service to be configured in .B /etc/pam.confor.B /etc/pam.d/<servicename>.PThe default service name is "squid", and the program makes useof the.BR "" ' auth "' and '" account 'management groups to verify the password and the accounts validity..PFor details on how to configure PAM services, see the PAMdocumentation for your system. This manual does not cover PAMconfiguration details. The existing PAM service definitions forother applications on your system is also a good source for exampleson how to configure a PAM service...SH NOTES.When used for authenticating to local UNIX shadow password databasesthe program must be running as root or else it won't have sufficientpermissions to access the user password database. Such use of thisprogram is not recommended, but if you absolutely need to then makethe program setuid root.RS.P.B chown root pam_auth.br.B chmod u+s pam_auth.RE.PPlease note that in such configurations it is also strongly recommendedthat the program is moved into a directory where normal users cannotaccess it, as this mode of operation will allow any local user tobrute-force other users passwords. Also note the program has not beenfully audited and the author cannot be held responsible for any securityissues due to such installations...SH AUTHORSquid pam_auth and this manual is written by.I Henrik Nordstrom <hno@squid-cache.org>..SH COPYRIGHTSquid pam_auth and this manual is Copyright 1999,2002,2003Henrik Nordstrom <hno@squid-cache.org>..SH QUESTIONSQuestions on the usage of this program can be sent to the.I Squid Users <squid-users@squid-cache.org>mailing list...SH REPORTING BUGSReport bugs or bug-fixes to.I Squid Bugs <squid-bugs@squid-cache.org>or ideas for new improvements to .I Squid Developers <squid-dev@squid-cache.org>..SH "SEE ALSO".BR pam (8), " PAM Systems Administrator Guide"