Apache2-AuthenSecurID
view release on metacpan or search on metacpan
RCS/README,v view on Meta::CPAN
CookieName directive in httpd.conf. It defaults to Apache if this
variable is not set.
* ace_initd_server
The name of the server running the ACE request daemon. This daemon is
the actual process that communicates with the ACE Server. If the user is
in NEXT TOKEN MODE due to repeated failures or SET PIN MODE the
Authen::ACE object must persist beyond the initial request. A request
packet is constructed with a random number, type of transaction,
username, passcode and session identifier. The request packet is then
encrypted using Blowfish and sent to the ACE request daemon. The ACE
request daemon decrypts and parses the packet. The request if forwarded
to the ACE server and the response is sent back to the handler. The
random number originally sent is returned to prevent attacks. It
defaults to localhost if this variable is not set.
* ace_initd_port
The port the that the Ace request daemon listens on. It defaults to 1969
if this variable is not set.
CONFIGURATION
The module should be loaded upon startup of the Apache daemon. Add the
following line to your httpd.conf:
PerlModule Apache2::AuthenSecurID::Auth
PREREQUISITES
For AuthenSecurID::Auth you need to enable the appropriate call-back
hook when making mod_perl:
perl Makefile.PL PERL_AUTHEN=1
AuthenSecurID::Auth requires Crypt::Blowfish and Crypt::CBC.
For AuthenSecurID::Auth to properly track users mod_usertrack must be
compiled and enabled.
SEE ALSO
Apache, mod_perl, Authen::ACE Apache2::AuthenSecurID::Auth
AUTHORS
* mod_perl by Doug MacEachern <dougm@@osf.org>
* Authen::ACE by Dave Carrigan <Dave.Carrigan@@iplenergy.com>
* Apache::AuthenSecurID by David Berk <dberk@@lump.org>
* Apache::AuthenSecurID::Auth by David Berk <dberk@@lump.org>
* port to mod_perl2 and cleanups by Al Tobey <tobert@@gmail.com>
COPYRIGHT
The Apache2::AuthenSecurID::Auth module is free software; you can
redistribute it and/or modify it under the same terms as Perl itself.
NAME
ace_initd - ACE Authentication daemon for Apache::AuthenSecurID::Auth
SYNOPSIS
nohup ./ace_initd --listen=127.0.0.1 --facility=local2 --secret=123456
--port=1969 --var_ace=/var/ace
DESCRIPTION
This daemon handles the ACE authentication requests for the
Apache::SecurID::Auth module. It is a single threaded, single fork
server that listens on a specified UDP port. Incoming requests are
decrypted and requests forwarded to the ACE server. If a specific
request is in either in NEXT TOKEN MODE or SET PIN MODE the Authen::ACE
object is not deleted. It is instead kept in memory to handle those
specific requests later.
LIST OF TOKENS
* --var_ace
Specifies the location of the sdconf.rec file. It defaults to
$ENV{VAR_ACE} if this variable is not set.
* --secret
The Blowfish key used to encrypt and decrypt the authentication cookie.
It defaults to my secret if this variable is not set.
* --port
The port the that the Ace request daemon listens on. It defaults to 1969
if this variable is not set.
* --facility
The syslog facility ace_initd logs to. It defaults to local2 if this
variable is not set.
* --daemon
Break off from the shell and become a daemon.
CONFIGURATION
Either run from the command line;
prompt$ nohup ./ace_initd &
or write the appropriate scripts in the /etc/rc directories.
PREREQUISITES
ace_initd requires Crypt::Blowfish, Crypt::CBC and Authen::ACE.
SEE ALSO
Authen::ACE Apache::AuthenSecurID Apache::AuthenSecurID::Auth
AUTHORS
* mod_perl by Doug MacEachern <dougm@@osf.org>
* Authen::ACE by Dave Carrigan <Dave.Carrigan@@iplenergy.com>
* Apache::AuthenSecurID by David Berk <dberk@@lump.org>
* Apache::AuthenSecurID::Auth by David Berk <dberk@@lump.org>
* Various changes by Al Tobey <tobert@@gmail.com>
COPYRIGHT
ace_initd is free software; you can redistribute it and/or modify it
under the same terms as Perl itself.
@
1.4
log
@*** empty log message ***
@
text
@d1 1
a1 1
RCS/README,v view on Meta::CPAN
daemon. Add the following line to your httpd.conf:
PerlModule Apache::AuthenSecurID::Auth
d192 1
d195 2
a196 2
For AuthenSecurID::Auth you need to enable the appropriate
call-back hook when making mod_perl:
d198 1
a198 1
perl Makefile.PL PERL_AUTHEN=1
d200 1
a200 2
AuthenSecurID::Auth requires Crypt::Blowfish and
Crypt::CBC.
d202 2
a203 2
For AuthenSecurID::Auth to properly track users
mod_usertrack must be compiled and enabled.
d206 1
a206 2
the Apache manpage, the mod_perl manpage, the Authen::ACE
manpage the Apache::AuthenSecurID::Auth manpage
d209 5
a213 9
o mod_perl by Doug MacEachern <dougm@@osf.org>
o Authen::ACE by Dave Carrigan
<Dave.Carrigan@@iplenergy.com>
o Apache::AuthenSecurID by David Berk <dberk@@lump.org>
o Apache::AuthenSecurID::Auth by David Berk
<dberk@@lump.org>
d216 2
a217 7
The Apache::AuthenSecurID::Auth module is free software;
you can redistribute it and/or modify it under the same
terms as Perl itself.
ACE_INITD(1) User Contributed Perl Documentation ACE_INITD(1)
d220 1
a220 2
ace_initd - ACE Authentication daemon for
Apache::AuthenSecurID::Auth
d223 2
a224 7
# Configuration in /etc/ace_initd.conf
VAR_ACE /the/ace/data/directory
port 1969
AuthCryptKey Encryption_Key
syslog local2
d227 7
a233 8
This daemon handles the ACE authentication requests for
the Apache::SecurID::Auth module. It is a single
threaded, single fork server that listens on a specified
UDP port. Incoming requests are decrypted and requests
forwarded to the ACE server. If a specific request is in
either in NEXT TOKEN MODE or SET PIN MODE the Authen::ACE
object is not deleted. It is instead kept in memory to
handle those specific requests later.
d236 18
a253 18
o VAR_ACE
Specifies the location of the sdconf.rec file. It
defaults to /opt/ace/data if this variable is not
set.
o AuthCryptKey
The Blowfish key used to encrypt and decrypt the
authentication cookie. It defaults to my secret if
this variable is not set.
o ace_initd_port
The port the that the Ace request daemon listens
on. It defaults to 1969 if this variable is not
set.
o syslog
The syslog facility ace_initd logs to. It defaults
to local2 if this variable is not set.
d256 1
a256 1
Either run from the command line;
d258 1
a258 1
prompt$ nohup ./ace_initd &
d260 1
a260 2
or write the appropriate scripts in the /etc/rc
directories.
d263 1
a263 3
ace_initd requires Crypt::Blowfish, Crypt::CBC and
Authen::ACE.
d266 1
a266 2
the Authen::ACE manpage the Apache::AuthenSecurID manpage
the Apache::AuthenSecurID::Auth manpage
d269 5
a273 9
o mod_perl by Doug MacEachern <dougm@@osf.org>
o Authen::ACE by Dave Carrigan
<Dave.Carrigan@@iplenergy.com>
o Apache::AuthenSecurID by David Berk <dberk@@lump.org>
o Apache::AuthenSecurID::Auth by David Berk
<dberk@@lump.org>
d276 2
a277 5
ace_initd is free software; you can redistribute it and/or
modify it under the same terms as Perl itself.
( run in 1.061 second using v1.01-cache-2.11-cpan-39bf76dae61 )