Apache2::AuthenSecurID::Auth

Apache2::AuthenSecurID::Auth is a Perl module that serves as an authentication handler for Apache2::AuthenSecurID. The module allows authentication against a SecurID server. A request is redirected to this handler if the authentication cookie does not exist or is no longer valid.

To configure the module, one needs to add the following code in httpd.conf:


SetHandler perl-script
PerlHandler Apache2::AuthenSecurID::Auth
PerlSetVar AuthCryptKey Encryption_Key
PerlSetVar AuthCookie Name_of_Authentication_Cookie
PerlSetVar AuthUserCookie Name_of_Username_Authentication_Cookie
PerlSetVar AuthCookiePath /path/of/authentication/cookie
PerlSetVar AuthApacheCookie Apache_Cookie
PerlSetVar ace_initd_server name.of.ace.handler.server.com
PerlSetVar ace_initd_port 1969


When a user enters their username and passcode, the handler will construct and encrypt a UDP packet and send it to the Ace request daemon. This is necessary since libsdiclient.a needs to persist for NEXT TOKEN MODE and SET PIN MODE.

If the authentication is valid, an encrypted Authentication Cookie is set, and the request is redirected to the originating Uniform Resource Identifier (URI). If the user needs to enter NEXT TOKEN or set their PIN, they will be prompted to do so. If valid, the handler will redirect the request to the originating URI.

Overall, Apache2::AuthenSecurID::Auth is a reliable module that provides seamless authentication for Apache2::AuthenSecurID users.