3 # Copyright (C) 2014 Simo Sorce <simo@redhat.com>
5 # see file 'COPYING' for use and warranty information
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation, either version 3 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
20 from ipsilon.login.common import LoginPageBase, LoginManagerBase
24 class Krb(LoginPageBase):
26 def root(self, *args, **kwargs):
27 # Someone typed manually or a robot is walking th tree.
28 # Redirect to default page
29 return self.lm.redirect_to_path(self.lm.path)
32 class KrbAuth(LoginPageBase):
34 def root(self, *args, **kwargs):
35 # If we can get here, we must be authenticated and remote_user
36 # was set. Check the session has a use set already or error.
37 if self.user and self.user.name:
38 return self.lm.auth_successful(self.user.name)
40 return self.lm.auth_failed()
43 class KrbError(LoginPageBase):
45 def root(self, *args, **kwargs):
46 cherrypy.log.error('REQUEST: %s' % cherrypy.request.headers)
47 # If we have no negotiate header return whatever mod_auth_kerb
48 # generated and wait for the next request
50 if not 'WWW-Authenticate' in cherrypy.request.headers:
51 cherrypy.response.status = 401
53 if self.lm.next_login:
54 return self.lm.next_login.page.root(*args, **kwargs)
56 conturl = '%s/login' % self.basepath
57 return self._template('login/krb.html',
58 title='Kerberos Login',
61 # If we get here, negotiate failed
62 return self.lm.auth_failed()
65 class LoginManager(LoginManagerBase):
67 def __init__(self, *args, **kwargs):
68 super(LoginManager, self).__init__(*args, **kwargs)
70 self.path = 'krb/negotiate'
72 self.description = """
73 Kereros Negotiate authentication plugin. Relies on the mod_auth_kerb apache
74 plugin for actual authentication. """
76 def get_tree(self, site):
77 self.page = Krb(site, self)
78 self.page.__dict__['negotiate'] = KrbAuth(site, self)
79 self.page.__dict__['unauthorized'] = KrbError(site, self)