1. mod_perl Authentication and Authorization James Smith Texas A&M University jgsmith@jamesmith.com O’Reilly Open Source Convention

2. 1 June 2001Copyright ©2001 James Smith2 Some Questions What are authentication and authorization? How does mod_perl work with Apache to handle authentication and authorization? What are some of the modules already available on CPAN?

3. 1 June 2001Copyright ©2001 James Smith3 What is Authentication? Authentication answers the question of who someone is.

4. 1 June 2001Copyright ©2001 James Smith4 What is Authorization Authorization answers the question of should a person be where they are.

5. 1 June 2001Copyright ©2001 James Smith5 When is Authorization/Authentication? Access phase Authentication phase Authorization phase

6. 1 June 2001Copyright ©2001 James Smith6 Basic Forms of Authentication Protocol Based Authentication –Basic Authentication –Digest Authentication –NTLM Authentication

7. 1 June 2001Copyright ©2001 James Smith7 Basic Forms of Authentication Forms Based Authentication –Tickets –Sessions TLS/SSL Client Certificates

8. 1 June 2001Copyright ©2001 James Smith8 Possible Module Results OK if authenticated or authorized AUTH_REQUIRED if authentication information is incorrect or user is not authorized

9. 1 June 2001Copyright ©2001 James Smith9 Possible Module Results SERVER_ERROR if an unrecoverable error occurs DECLINED if the module is non- authoritative

10. 1 June 2001Copyright ©2001 James Smith10 Modules Using the Protocol A::AuthLDAP, A::AuthPerLDAP, A::AuthenLDAP A::AuthenN2 A::AuthenNIS A::AuthenNISPlus A::AuthenPasswd, A::AuthzPasswd A::AuthenPasswdSrv

11. 1 June 2001Copyright ©2001 James Smith11 Modules Using the Protocol A::AuthenRadius A::AuthenSecurID A::AuthenSMB A::AuthenURL A::AuthenRadius A::AuthenSecurID A::AuthenSMB A::AuthenURL

12. 1 June 2001Copyright ©2001 James Smith12 Modules using Forms A::AuthCookie, A::AuthCookieDBI, A::AuthCookieURL A::AuthTicket Authen::Ticket

13. 1 June 2001Copyright ©2001 James Smith13 Miscellaneous Modules A::AuthenCache A::AuthzCache

14. 1 June 2001Copyright ©2001 James Smith14 Contact Infomration: James Smith http://www.jamesmith.com/ jgsmith@jamesmith.com