| line |
stmt |
bran |
cond |
sub |
pod |
time |
code |
|
1
|
|
|
|
|
|
|
package Apache::Authenlemonldap; |
|
2
|
1
|
|
|
1
|
|
53781
|
use Apache::Constants qw(:common); |
|
|
0
|
|
|
|
|
|
|
|
|
0
|
|
|
|
|
|
|
|
3
|
|
|
|
|
|
|
use Apache2::Log; |
|
4
|
|
|
|
|
|
|
our $VERSION = '1.0.0'; |
|
5
|
|
|
|
|
|
|
sub handler { |
|
6
|
|
|
|
|
|
|
my $r = shift; |
|
7
|
|
|
|
|
|
|
return OK unless $r->is_initial_req; |
|
8
|
|
|
|
|
|
|
my ( $res, $role ) = $r->get_basic_auth_pw; |
|
9
|
|
|
|
|
|
|
return $res if $res; |
|
10
|
|
|
|
|
|
|
my $user = $r->connection->user; |
|
11
|
|
|
|
|
|
|
if ( !$user ) { |
|
12
|
|
|
|
|
|
|
$r->note_basic_auth_failure; |
|
13
|
|
|
|
|
|
|
$r->log_reason( "no uid found", $r->uri ); |
|
14
|
|
|
|
|
|
|
return AUTH_REQUIRED; |
|
15
|
|
|
|
|
|
|
} |
|
16
|
|
|
|
|
|
|
my @directives = @{ $r->requires }; |
|
17
|
|
|
|
|
|
|
$r->subprocess_env( ROLE => $role ); |
|
18
|
|
|
|
|
|
|
$r->log->info("$user with role $role EXPECTED"); |
|
19
|
|
|
|
|
|
|
for $req (@directives) { |
|
20
|
|
|
|
|
|
|
my ( $require, @rest ) = split /\s+/, $req->{requirement}; |
|
21
|
|
|
|
|
|
|
if ( lc($directive) eq 'valid-user' ) { |
|
22
|
|
|
|
|
|
|
$r->log->info("$user with role $role GRANTED"); |
|
23
|
|
|
|
|
|
|
return OK; |
|
24
|
|
|
|
|
|
|
} |
|
25
|
|
|
|
|
|
|
|
|
26
|
|
|
|
|
|
|
if ( lc($require) eq "user" ) { |
|
27
|
|
|
|
|
|
|
if ( grep { $_ eq $user } @rest ) { |
|
28
|
|
|
|
|
|
|
$r->log->info("$user with role $role GRANTED"); |
|
29
|
|
|
|
|
|
|
return OK; |
|
30
|
|
|
|
|
|
|
|
|
31
|
|
|
|
|
|
|
} |
|
32
|
|
|
|
|
|
|
} |
|
33
|
|
|
|
|
|
|
} |
|
34
|
|
|
|
|
|
|
return AUTH_REQUIRED; |
|
35
|
|
|
|
|
|
|
|
|
36
|
|
|
|
|
|
|
} |
|
37
|
|
|
|
|
|
|
1; |
|
38
|
|
|
|
|
|
|
__END__ |