NAME

AuthCASpbh::Authn - CAS SSO authentication for Apache/mod_perl

SYNOPSIS

        PerlModule Apache2::AuthCASpbh::Authn
        <Location "/myapp">
                AuthType Apache2::AuthCASpbh
                AuthName "CAS"
                PerlAuthenHandler Apache2::AuthCASpbh::Authn
                Require valid-user
        </Location>

DESCRIPTION

AuthCASpbh::Authn provides CAS authentication for Apache/mod_perl. It can be used to protect Apache resources, along with built in Apache authorization for users/groups as well as CAS attribute based authorization provided by Apache::AuthCASpbh::Authz. Along with Apache::AuthCASpbh::UserAgent, authentication can be proxied to additional CAS based services. Its operation can be managed by the configuration variables described in Apache::AuthCASpbh.

mod_perl integration

If the resource being protected is a mod_perl application, the following values will be available in the request pnotes:

cas_attributes

A hash of the attributes supplied by the CAS server, if any.

cas_pgt

The proxy granting ticket acquired from the CAS server, if RequestPGT is enabled.

cas_proxy

An array of proxies the authentication originated via if the client ticket provided was a proxy ticket.

cas_session

The session identifier for this request.

AVAILABILITY

AuthCASpbh is available via CPAN as well as on GitHub at

https://github.com/pbhenson/Apache2-AuthCASpbh

AUTHOR

Copyright (c) 2018, Paul B. Henson <henson@acm.org>

This file is part of AuthCASpbh.

AuthCASpbh is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

AuthCASpbh is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with AuthCASpbh. If not, see <http://www.gnu.org/licenses/>.

SEE ALSO

Apache2::AuthCASpbh - Overview and configuration details

Apache2::AuthCASpbh::Authz - Authorization functionality

Apache2::AuthCASpbh::ProxyCB - Proxy granting ticket callback module

Apache2::AuthCASpbh::UserAgent - Proxy authentication client