Package: squid Version: 3.5.23-5+deb9u1 In the Debian package, /usr/lib/squid/basic_pam_auth lacks its shadow group and associated s-gid bit, and thus cannot fulfill its sole purpose of authenticating users, as it cannot read the /etc/shadow file.
Manually adding fixes this for a while, but such fix undoes itself on next update of squid package, resulting in cumbersome support calls. Please fix. Or maybe, if you feel that some people might be uncomfortable with binaries that have setuid or setgid bits, just separate it into a separate package? But just breaking it is _not_ nice. Thanks, Alain
