PacketFence authentication::kerberos

kerberos.pm

package authentication::kerberos;

=head1 NAME

authentication::kerberos - kerberos authentication

=head1 SYNOPSYS

  use authentication::kerberos;
  my ( $authReturn, $err ) = authenticate (
                                 $login,
                                 $password
                                          );

=head1 DESCRIPTION

authentication::kerberos allows to validate a username/password
combination using Kerberos5

=head1 CONFIGURATION AND ENVIRONMENT

Define the variables C<Krb5Realm> at the
top of the module.

=cut

use strict;
use warnings;

BEGIN {
 use Exporter ();
 our (@ISA, @EXPORT);
 @ISA    = qw(Exporter);
 @EXPORT = qw(authenticate);
}

use Authen::Krb5::Simple;

my $Krb5Realm = 'EXAMPLE.COM';

=head1 SUBROUTINES

=over

=item * authenticate ($login, $password)

  return (1,0) for successfull authentication
  return (0,2) for inability to check credentials
  return (0,1) for wrong login/password

=back

=cut

sub authenticate {
 my ($username, $password) = @_;
 my $krb = Authen::Krb5::Simple->new( realm => $Krb5Realm );

 if ($krb->authenticate($username, $password)) {
     return (1,0);
 } else {
     return (0,1);
 }
}

=head1 DEPENDENCIES

=over

=item * Authen::Kerberos

=back

=head1 AUTHOR

Brad Lhotsky <[email protected]> 

Based on pf::authenticate::radius by:

Maikel van der roest <[email protected]>

=head1 COPYRIGHT

Copyright (C) 2008 Utelisys Communications B.V.

This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301,
USA.

=cut

1;