/usr/share/perl5/Authen/Simple/Kerberos.pm is in libauthen-simple-kerberos-perl 0.1-5.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 | package Authen::Simple::Kerberos;
use strict;
use warnings;
use base 'Authen::Simple::Adapter';
use Authen::Krb5::Simple;
use Params::Validate qw[];
our $VERSION = 0.1;
__PACKAGE__->options({
realm => {
type => Params::Validate::SCALAR,
optional => 1
}
});
sub check {
my ( $self, $username, $password ) = @_;
my @arguments = $self->realm ? ( realm => $self->realm ) : ();
my $kerberos = Authen::Krb5::Simple->new(@arguments);
my $realm = $kerberos->realm;
unless ( $kerberos->authenticate( $username, $password ) ) {
my $error = $kerberos->errstr;
$self->log->debug( qq/Failed to authenticate user '$username' using realm '$realm'. Reason: '$error'/ )
if $self->log;
return 0;
}
$self->log->debug( qq/Successfully authenticated user '$username' using realm '$realm'./ )
if $self->log;
return 1;
}
1;
__END__
=head1 NAME
Authen::Simple::Kerberos - Simple Kerberos authentication
=head1 SYNOPSIS
use Authen::Simple::Kerberos;
my $kerberos = Authen::Simple::Kerberos->new(
realm => 'REALM.COMPANY.COM'
);
if ( $kerberos->authenticate( $username, $password ) ) {
# successfull authentication
}
# or as a mod_perl Authen handler
PerlModule Authen::Simple::Apache
PerlModule Authen::Simple::Kerberos
PerlSetVar AuthenSimpleKerberos_realm "REALM.COMPANY.COM"
<Location /protected>
PerlAuthenHandler Authen::Simple::Kerberos
AuthType Basic
AuthName "Protected Area"
Require valid-user
</Location>
=head1 DESCRIPTION
Kerberos authentication.
=head1 METHODS
=over 4
=item * new
This method takes a hash of parameters. The following options are
valid:
=over 8
=item * realm
Kerberos realm.
realm => 'REALM.COMPANY.COM'
=item * log
Any object that supports C<debug>, C<info>, C<error> and C<warn>.
log => Log::Log4perl->get_logger('Authen::Simple::Kerberos')
=back
=item * authenticate( $username, $password )
Returns true on success and false on failure.
=back
=head1 SEE ALSO
L<Authen::Simple>.
L<Authen::Krb5::Simple>.
=head1 AUTHOR
Christian Hansen C<ch@ngmedia.com>
=head1 COPYRIGHT
This program is free software, you can redistribute it and/or modify
it under the same terms as Perl itself.
=cut
|