view release on metacpan or  search on metacpan

README  view on Meta::CPAN

    CookieName directive in httpd.conf. It defaults to Apache if this
    variable is not set.

    * ace_initd_server
    The name of the server running the ACE request daemon. This daemon is
    the actual process that communicates with the ACE Server. If the user is
    in NEXT TOKEN MODE due to repeated failures or SET PIN MODE the
    Authen::ACE object must persist beyond the initial request. A request
    packet is constructed with a random number, type of transaction,
    username, passcode and session identifier. The request packet is then
    encrypted using Blowfish and sent to the ACE request daemon. The ACE
    request daemon decrypts and parses the packet. The request if forwarded
    to the ACE server and the response is sent back to the handler. The
    random number originally sent is returned to prevent attacks. It
    defaults to localhost if this variable is not set.

    * ace_initd_port
    The port the that the Ace request daemon listens on. It defaults to 1969
    if this variable is not set.

CONFIGURATION
    The module should be loaded upon startup of the Apache daemon. Add the
    following line to your httpd.conf:

     PerlModule Apache2::AuthenSecurID::Auth

PREREQUISITES
    For AuthenSecurID::Auth you need to enable the appropriate call-back
    hook when making mod_perl:

      perl Makefile.PL PERL_AUTHEN=1

    AuthenSecurID::Auth requires Crypt::Blowfish and Crypt::CBC.

    For AuthenSecurID::Auth to properly track users mod_usertrack must be
    compiled and enabled.

SEE ALSO
    Apache, mod_perl, Authen::ACE Apache2::AuthenSecurID::Auth

AUTHORS
    * mod_perl by Doug MacEachern <dougm@osf.org>
    * Authen::ACE by Dave Carrigan <Dave.Carrigan@iplenergy.com>
    * Apache::AuthenSecurID by David Berk <dberk@lump.org>
    * Apache::AuthenSecurID::Auth by David Berk <dberk@lump.org>
    * port to mod_perl2 and cleanups by Al Tobey <tobert@gmail.com>

COPYRIGHT
    The Apache2::AuthenSecurID::Auth module is free software; you can
    redistribute it and/or modify it under the same terms as Perl itself.

NAME
    ace_initd - ACE Authentication daemon for Apache::AuthenSecurID::Auth

SYNOPSIS
    nohup ./ace_initd --listen=127.0.0.1 --facility=local2 --secret=123456
    --port=1969 --var_ace=/var/ace

DESCRIPTION
    This daemon handles the ACE authentication requests for the
    Apache::SecurID::Auth module. It is a single threaded, single fork
    server that listens on a specified UDP port. Incoming requests are
    decrypted and requests forwarded to the ACE server. If a specific
    request is in either in NEXT TOKEN MODE or SET PIN MODE the Authen::ACE
    object is not deleted. It is instead kept in memory to handle those
    specific requests later.

LIST OF TOKENS
    * --var_ace
    Specifies the location of the sdconf.rec file. It defaults to
    $ENV{VAR_ACE} if this variable is not set.

    * --secret
    The Blowfish key used to encrypt and decrypt the authentication cookie.
    It defaults to my secret if this variable is not set.

    * --port
    The port the that the Ace request daemon listens on. It defaults to 1969
    if this variable is not set.

    * --facility
    The syslog facility ace_initd logs to. It defaults to local2 if this
    variable is not set.

    * --daemon
    Break off from the shell and become a daemon.

CONFIGURATION
    Either run from the command line;

    prompt$ nohup ./ace_initd &

    or write the appropriate scripts in the /etc/rc directories.

PREREQUISITES
    ace_initd requires Crypt::Blowfish, Crypt::CBC and Authen::ACE.

SEE ALSO
    Authen::ACE Apache::AuthenSecurID Apache::AuthenSecurID::Auth

AUTHORS
    * mod_perl by Doug MacEachern <dougm@osf.org>
    * Authen::ACE by Dave Carrigan <Dave.Carrigan@iplenergy.com>
    * Apache::AuthenSecurID by David Berk <dberk@lump.org>
    * Apache::AuthenSecurID::Auth by David Berk <dberk@lump.org>
    * Various changes by Al Tobey <tobert@gmail.com>

COPYRIGHT
    ace_initd is free software; you can redistribute it and/or modify it
    under the same terms as Perl itself.