File Coverage

blib/lib/Apache/AuthenSecurID/Auth.pm

Criterion	Covered	Total	%
statement	4	6	66.6
branch			n/a
condition			n/a
subroutine	2	2	100.0
pod			n/a
total	6	8	75.0

# $Id: Auth.pm,v 1.9 2002/07/31 16:44:14 Administrator Exp $

package Apache::AuthenSecurID::Auth;

use strict;
use Apache;
use Apache::Registry;
use Apache::Constants qw(:common);
use IO::Socket::INET;
use Crypt::CBC;
use vars qw($VERSION);

$VERSION = '0.4';


sub handler {

   my $r = shift;

   # seed the random number generator
   srand (time ^ $$ ^ unpack "%L*", `ps axww | gzip -f`);

   #get params
   my %params = ( $r->args, $r->content );
   my $username = $params {'username'};
   my $passcode = $params{'passcode'};
   my $type = $params{'type'};
   my $uri = $params{'a'};

   # get ace_initd config directives
   my $ace_initd_server  = $r->dir_config("ace_initd_server") || "localhost";
   my $ace_initd_port  = $r->dir_config("ace_initd_port") || 1969;

   # grab apache session cookie
   my ( $session_id ) = ( ($r->header_in("Cookie") || "") =~
                /Apache=([^;]+)/);

   my $client = IO::Socket::INET->new ( PeerAddr   =>      $ace_initd_server,
                                        PeerPort   =>      $ace_initd_port,
                                        Proto      =>      'udp' );

   my %ACE;
   my $request;
   my $message;
   my $extra_input;

   if ( ( ! $username && ! $passcode ) || ( $type ne "pin"  && ! $passcode ) ||
         	( $passcode =~ /\:/ ) ) {
	$message = qq{
		Please enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.  If you do not have
		a PIN yet just enter the 6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};
   } else {
	if ( $type eq "pin" ) {
		( $passcode, $message,$extra_input) = check_pin ( \%params ) ;
		if ( $passcode )  {
			($message,$extra_input) = Do_ACE($username,$passcode,$type,$session_id,$client,$r,\%params);
		}
	} else {
		($message,$extra_input) = Do_ACE($username,$passcode,$type,$session_id,$client,$r,\%params);
	}

   }


my $head = qq{





 




91




 





 





 





 





 





 



     




92




 





 





 





 





 





 



 	 




93




 





 





 





 





 





 



  




94




 





 





 





 





 





 



     




95




 





 





 





 





 





 



 	 




96




 





 





 





 





 





 



 	    




97




 





 





 





 





 





 



 		 




98




 





 





 





 





 





 



 		    




99




 





 





 





 





 





 



 			 




100




 





 





 





 





 





 



 			 




101




 





 





 





 





 





 



 			SecurID Authorization 




102




 





 





 





 





 





 



 			 




103




 





 





 





 





 





 



 			 




104




 





 





 





 





 





 



 		    




105




 





 





 





 





 





 



 		 




106




 





 





 





 





 





 



 		 




107




 





 





 





 





 





 



 		    




108




 





 





 





 





 





 



 			 




109




 





 





 





 





 





 



 			$message 




110




 





 





 





 





 





 



 			 




111




 





 





 





 





 





 



 		    




112




 





 





 





 





 





 



 		 




113




 





 





 





 





 





 



 	    




114




 





 





 





 





 





 



 	 




115




 





 





 





 





 





 



     




116




 





 





 





 





 





 



     




117




 





 





 





 





 





 



 	 




118




 





 





 





 





 





 



 	    




119




 





 





 





 





 





 



 		 




120




 





 





 





 





 





 



 		    




121




 





 





 





 





 





 



 			 




122




 





 





 





 





 





 



 			 




123




 





 





 





 





 





 



 			Username : 




124




 





 





 





 





 





 



 			 




125




 





 





 





 





 





 



 			 




126




 





 





 





 





 





 



 		    




127




 





 





 





 





 





 



 		    




128




 





 





 





 





 





 



 			 




129




 





 





 





 





 





 



 		    




130




 





 





 





 





 





 



 		 




131




 





 





 





 





 





 



 		$extra_input 




132




 





 





 





 





 





 



 	    




133




 





 





 





 





 





 



 	 




134




 





 





 





 





 





 



     




135




 





 





 





 





 





 



  




136




 





 





 





 





 





 



 	 




137




 





 





 





 





 





 



     




138




 





 





 





 





 





 



     




139




 





 





 





 





 





 



 	 




140




 





 





 





 





 





 



 		 




141




 





 





 





 





 





 



 	 




142




 





 





 





 





 





 



 	 




143




 





 





 





 





 





 



 		 




144




 





 





 





 





 





 



 	 




145




 





 





 





 





 





 



     




146


 




94




 





 





 





 





 





 



     




95




 





 





 





 





 





 



 	 




96




 





 





 





 





 





 



 	    




97




 





 





 





 





 





 



 		 




98




 





 





 





 





 





 



 		    




99




 





 





 





 





 





 



 			 




100




 





 





 





 





 





 



 			 




101




 





 





 





 





 





 



 			SecurID Authorization 




102




 





 





 





 





 





 



 			 




103




 





 





 





 





 





 



 			 




104




 





 





 





 





 





 



 		    




105




 





 





 





 





 





 



 		 




106




 





 





 





 





 





 



 		 




107




 





 





 





 





 





 



 		    




108




 





 





 





 





 





 



 			 




109




 





 





 





 





 





 



 			$message 




110




 





 





 





 





 





 



 			 




111




 





 





 





 





 





 



 		    




112




 





 





 





 





 





 



 		 




113




 





 





 





 





 





 



 	    




114




 





 





 





 





 





 



 	 




115




 





 





 





 





 





 



     




116




 





 





 





 





 





 



     




117




 





 





 





 





 





 



 	 




118




 





 





 





 





 





 



 	    




119




 





 





 





 





 





 



 		 




120




 





 





 





 





 





 



 		    




121




 





 





 





 





 





 



 			 




122




 





 





 





 





 





 



 			 




123




 





 





 





 





 





 



 			Username : 




124




 





 





 





 





 





 



 			 




125




 





 





 





 





 





 



 			 




126




 





 





 





 





 





 



 		    




127




 





 





 





 





 





 



 		    




128




 





 





 





 





 





 



 			 




129




 





 





 





 





 





 



 		    




130




 





 





 





 





 





 



 		 




131




 





 





 





 





 





 



 		$extra_input 




132




 





 





 





 





 





 



 	    




133




 





 





 





 





 





 



 	 




134




 





 





 





 





 





 



     




135


	    




97




 





 





 





 





 





 



 		 




98




 





 





 





 





 





 



 		    




99




 





 





 





 





 





 



 			 




100




 





 





 





 





 





 



 			 




101




 





 





 





 





 





 



 			SecurID Authorization 




102




 





 





 





 





 





 



 			 




103




 





 





 





 





 





 



 			 




104




 





 





 





 





 





 



 		    




105




 





 





 





 





 





 



 		 




106




 





 





 





 





 





 



 		 




107




 





 





 





 





 





 



 		    




108




 





 





 





 





 





 



 			 




109




 





 





 





 





 





 



 			$message 




110




 





 





 





 





 





 



 			 




111




 





 





 





 





 





 



 		    




112




 





 





 





 





 





 



 		 




113




			SecurID Authorization







			$message








	    




119




 





 





 





 





 





 



 		 




120




 





 





 





 





 





 



 		    




121




 





 





 





 





 





 



 			 




122




 





 





 





 





 





 



 			 




123




 





 





 





 





 





 



 			Username : 




124




 





 





 





 





 





 



 			 




125




 





 





 





 





 





 



 			 




126




 





 





 





 





 





 



 		    




127




 





 





 





 





 





 



 		    




128




 





 





 





 





 





 



 			 




129




 





 





 





 





 





 



 		    




130




 





 





 





 





 





 



 		 




131




 





 





 





 





 





 



 		$extra_input 




132




			Username :







		$extra_input


















};

$r->content_type ('text/html');
$r->send_http_header;
$r->print ($head);

}

sub check_pin {

	my ( $params ) = @_;

	my $pin1 = $$params{'pin1'};
	my $pin2 = $$params{'pin2'};
	my $alphanumeric = $$params{'alphanumeric'};
	my $min_pin_len = $$params{'min_pin_len'};
	my $max_pin_len = $$params{'max_pin_len'};
	my $uri = $$params{'a'};
        my $message;

	my $extra_info = qq{




			PIN :
















			PIN ( Again ) :







	   };

	if ( $pin1 != $pin2 ) {
	   $message = qq{
		New Pin Required
		Pins do not match!!
		Please enter a $min_pin_len to $max_pin_len digit pin.
	   };
		return ( 0, $message, $extra_info );
	}

	if ( $alphanumeric ) {
           if ( $pin1 =~ /[^0-9a-zA-Z]/ ) {
	      $message = qq{
		New Pin Required
		Pin must be alphanumeric!!
		Please enter a $min_pin_len to $max_pin_len digit pin.
	      };
		return ( 0, $message, $extra_info );
           }
        } else {
           if ( $pin1 =~ /[^0-9]/ ) {
	      $message = qq{
		New Pin Required
		Pin must be numeric!!
		Please enter a $min_pin_len to $max_pin_len digit pin.
	      };
		return ( 0, $message, $extra_info );
           }
        }

	my $pin_length = length ( $pin1 );

	if ( $pin_length < $min_pin_len || $pin_length > $max_pin_len ) {
	      $message = qq{
		New Pin Required
		Pin must be the correct length!!
		Please enter a $min_pin_len to $max_pin_len digit pin.
	      };
		return ( 0, $message, $extra_info );
	}

	return ( $pin1, 0, 0 );

}

sub Do_ACE {

	my ( $username,$passcode,$type,$session_id,$client,$r,$params ) = @_;

	$ENV{'VAR_ACE'} = "/opt/ace/data";
	my $message;
	my $extra_input;
	my $result;
	my %info;
	my $ace;
	my $mesg;
	my $my_rand = rand();
	my $return_rand;

	my $crypt_key = $r->dir_config("AuthCryptKey");
	my $crypt = new Crypt::CBC ( $crypt_key, "Blowfish" );

	$mesg = $crypt->encrypt_hex ("$my_rand:$session_id:$type:$username:$passcode");
	$client->send($mesg);

	$client->recv($mesg, 1024);
	$mesg = $crypt->decrypt_hex ( $mesg );


	( $return_rand, $result, $info{system_pin}, $info{min_pin_len}, $info{max_pin_len},
	$info{alphanumeric}, $info{user_selectable} )
	   = split /\:/, $mesg;

	if ( $my_rand ne $return_rand ) {
		$result = 100;
	}
	($message,$extra_input)=Ace_Result($result,\%info,$r,$crypt,$params,$username);

	return ( $message, $extra_input );

}

sub Ace_Result {

	my ( $result, $info, $r, $crypt, $params,$username ) = @_;
	my $message;
	my $extra_input;
	my $uri = $$params{'a'};
	my $time = time ();

if ( $result == 0 ) {

	my $auth_cookie = $r->dir_config("AuthCookie") || "SecurID";
	my $auth_user_cookie = $r->dir_config("AuthUserCookie") || "SecurID_User";
	my $crypt_cookie = $crypt->encrypt_hex ( "$time:$username" );
	$r->headers_out->add("Set-Cookie" => $auth_user_cookie . "=" .
		$username . "; path=" . "/");
	$r->headers_out->add("Set-Cookie" => $auth_cookie . "=" .
		$crypt_cookie . "; path=" . "/");

	$uri = $crypt->decrypt_hex ( $uri );

	# success
	$message = qq{
		User Authenticated
		 </td>
</tr>

<tr>
<td  class="h" >
<a name="307">307</a>
</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td class="s"> 		<!-- Begin </td>
</tr>

<tr>
<td  class="h" >
<a name="308">308</a>
</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td class="s"> 		window.location="$uri"; </td>
</tr>

<tr>
<td  class="h" >
<a name="309">309</a>
</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td class="s"> 		// End --> </td>
</tr>

<tr>
<td  class="h" >
<a name="310">310</a>
</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td >

&nbsp;

</td>

<td class="s">
		If you do not have Java Script enabled
		please click here to go to
		the protected page.
		Plase enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.  If you do not have
		a PIN yet just enter the 6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};
} elsif ( $result == 1 ) {
	# failure
	$message = qq{
		User Authentication Failed
		Plase enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.  If you do not have
		a PIN yet just enter the 6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};
} elsif ( $result == 100 ) {
	# failure
	$message = qq{
		User Authentication Failed
		The ACE server is either down or behaving
		incorrectly.  Please conact your system
		administrator.
	};
	$extra_input = qq{




			Passcode :









	};
} elsif ( $result == 2 ) {
	# next token code
	$message = qq{
		Next Token Required
		Plase wait for you token to change and enter
		the 6 digit SecurID token code.
	};
	$extra_input = qq{




			Next Token Code :









	};
} elsif ( $result == 5 ) {
	# New PIN required.
	if ( $$info{user_selectable} >= 1 ) {
	   $message = qq{
		New Pin Required
		Please enter a $$info{min_pin_len} to $$info{max_pin_len} digit pin.
	   };
	   $extra_input = qq{




			PIN :
















			PIN ( Again ) :







	   };

	} else {
	$message = qq{
		You have been assignes a new PIN.
		Your PIN is: $$info{system_pin}
		Please remember your PIN.  Do not share it
		with anyone else.
		Please enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};
	}
} elsif ( $result == 6 ) {
	$message = qq{
		PIN Accepted
		Please remember you PIN.  Do not share it
		with anyone else.
		Please enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};

} elsif ( $result == 7 ) {
	$message = qq{
		PIN Rejected
		Please contact the system administrator.
		Please enter your username and passcode
		Your passcode is your 4 - 8 digit pin plus
		6 digit SecurID code.
	};
	$extra_input = qq{




			Passcode :









	};

}
	return ( $message, $extra_input );
}


1;

__END__