Squid pede autenticação mas não autenticar [pam_auth] [RESOLVIDO]

brinfo
(usa CentOS)

Enviado em 19/03/2015 - 15:07h

Primeiramente desculpa abri este tópico pois achei um similar ao meu porém já estava fechado e pensei que ninguém iria verificar minha mensagem lá.
Meu proxy esta funcionando o squid sobe certinho, porém quando mando autenticar o usuários ele sempre fica na tela de senha.
segue abaixo meu código:

		

##############

##  INICIO  ##

##############

##  ERROS EM PT-BR ##

error_directory /usr/share/squid/errors/pt-br



## PORTA SQUID ##

http_port 3128



##  HOSTNAME  ##

visible_hostname galaxia

###########################################



####################

##  AUTENTICAÇÃO  ##

####################

auth_param basic program /usr/lib64/squid/pam_auth

auth_param basic children 5

auth_param basic realm Ao digitar minha senha declaro que estou ciente sobre os termos de uso da internet

auth_param basic credentialsttl 2 hours

auth_param basic casesensitive off

acl usuarios proxy_auth REQUIRED

###########################################





#######################

##  REGRAS DE CACHE  ##

#######################

cache_mem 64 MB

maximum_object_size_in_memory 64 KB

maximum_object_size 512 MB

minimum_object_size 0 KB

cache_swap_low 90

cache_swap_high 95

cache_dir ufs /var/spool/squid 10240 16 256

refresh_pattern ^ftp: 15 20% 2280

refresh_pattern ^gopher: 15 20% 2280

refresh_pattern . 15 20% 2280

###########################################





#####################

##  LOG DE ACESSO  ##

#####################

#cache_access_log /var/log/squid/access.log

access_log /var/log/squid/access.log squid

###########################################





#####################

##  REGRAS GERAIS  ##

#####################

#acl all src all #versões antigas

#acl all src 0.0.0.0/0.0.0.0 #versões antigas

acl manager proto cache_object

acl localhost src 127.0.0.1

acl SSL_ports port 443 563

acl Safe_ports port 80	# http

acl Safe_ports port 21	# ftp

acl Safe_ports port 443 563	# https, snews

acl Safe_ports port 70	# gopher

acl Safe_ports port 210	# wais

acl Safe_ports port 280	# http-mgmt

acl Safe_ports port 488	# gss-http

acl Safe_ports port 591	# filemaker

acl Safe_ports port 777	# multiling http

acl Safe_ports port 901	# swat

acl Safe_ports port 1025-65535 # portas altas

acl purge method PURGE

acl CONNECT method CONNECT

###########################################





#########################

##  BLOQUEIOS PADRÕES  ##	

#########################

http_access allow manager localhost

http_access deny manager

http_access allow purge localhost

http_access deny purge

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

###########################################





################################

##  Liberar de sites por URL  ##

################################

#acl sitespermitidos url_regex -i "/etc/squid/sitespermitidos"

#http_access allow sitespermitidos

###########################################





#######################################

##  Liberar por palavras permitidas  ##

#######################################

#acl palavraspermitidas dstdom_regex "/etc/squid/palavraspermitidas"

#http_access deny palavraspermitidas

###########################################



#################################

##  Bloqueio de sites por URL  ##

#################################

acl sitesproibidos url_regex -i "/etc/squid/sitesproibidos"

http_access deny sitesproibidos

###########################################





##########################################

##  Bloqueio de downloads por extensão  ##

##########################################

#acl downloadsproibidos url_regex -i \.exe \.torrent \.avi \.mp3

acl downloadsproibidos url_regex -i "/etc/squid/downloadsproibidos"

http_access deny downloadsproibidos

###########################################





#######################################

##  Bloqueio por palavras proibidas  ##

#######################################

acl palavrasproibidas dstdom_regex "/etc/squid/palavrasproibidas"

http_access deny palavrasproibidas

###########################################





##########################

##  CONTROLE DE ACESSO  ##

##########################

acl redelocal src 192.168.25.0/24

#http_access allow redelocal

http_access deny sitesproibidos

http_access deny downloadsproibidos

http_access deny palavrasproibidas

http_access allow usuarios

http_access allow localhost

http_access allow redelocal

###########################################





###########

##  FIM  ##

###########

http_access deny all

########################################### 

pensei que fosse a questão do pam_auth que estava sem permissão até usei o comando:

chown -R squid:squid //usr/lib64/squid/pam_auth 

porém o problema continua...

Duvida com o pam_auth ele faz autenticação com os usuários criados localmente no meu sistema correto?

brinfo
(usa CentOS)

Enviado em 20/03/2015 - 08:39h

up

buckminster
(usa Debian)

Enviado em 20/03/2015 - 10:34h

Você compilou manualmente ou instalou pelo Yum?

Verifique se o Squid está habilitado para usar a autenticação PAM.

E uma dúvida básica: você criou um usuário pelo menos?

Você criou o diretório /etc/pam.d/squid contendo:

#%PAM-1.0
auth required /lib64/security/pam_unix.so
account required /lib64/security/pam_unix.so

Você executou
chown root pam_auth
chmod u+s pam_auth

brinfo
(usa CentOS)

Enviado em 20/03/2015 - 10:44h

Instalei pelo yum
Obrigado, acabei de conseguir aqui...
eu estava pesquisando desde ontem ai achei nessa pagina:
http://manpages.ubuntu.com/manpages/precise/man8/squid3_pam_auth.8.html

meu problema foi que estava falando mudar as permissões do arquivo pam_auth

chown root pam_auth

chmod u+s pam_auth 

não sei para que serve o "chmod u+s" porém depois que realizei o procedimento esta funcionando perfeitamente.

Valeu por responder o tópico buckminster.

buckminster
(usa Debian)

Enviado em 20/03/2015 - 12:13h

De nada.