278N/A * Wyllys Ingersoll <wyllys.ingersoll@sun.com> 278N/A * Daniel Kouril <kouril@users.sourceforge.net> 278N/A * James E. Robinson, III <james@ncstate.net> 278N/A * Daniel Henninger <daniel@ncsu.edu> 278N/A * Ludek Sulak <xsulak@fi.muni.cz> 278N/A/* ==================================================================== 278N/A * The Apache Software License, Version 1.1 278N/A * Copyright (c) 2000-2003 The Apache Software Foundation. All rights 278N/A * Redistribution and use in source and binary forms, with or without 278N/A * modification, are permitted provided that the following conditions 278N/A * 1. Redistributions of source code must retain the above copyright 278N/A * notice, this list of conditions and the following disclaimer. 278N/A * 2. Redistributions in binary form must reproduce the above copyright 278N/A * notice, this list of conditions and the following disclaimer in 278N/A * the documentation and/or other materials provided with the 278N/A * 3. The end-user documentation included with the redistribution, 278N/A * if any, must include the following acknowledgment: 278N/A * "This product includes software developed by the 278N/A * Alternately, this acknowledgment may appear in the software itself, 278N/A * if and wherever such third-party acknowledgments normally appear. 278N/A * 4. The names "Apache" and "Apache Software Foundation" must 278N/A * not be used to endorse or promote products derived from this 278N/A * software without prior written permission. For written 278N/A * permission, please contact apache@apache.org. 278N/A * 5. Products derived from this software may not be called "Apache", 278N/A * nor may "Apache" appear in their name, without prior written 278N/A * permission of the Apache Software Foundation. 278N/A * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED 278N/A * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 278N/A * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 278N/A * DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR 278N/A * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 278N/A * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 278N/A * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF 278N/A * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 278N/A * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 278N/A * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT 278N/A * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 278N/A * ==================================================================== 278N/A * This software consists of voluntary contributions made by many 278N/A * individuals on behalf of the Apache Software Foundation. For more 278N/A * information on the Apache Software Foundation, please see 278N/A * Portions of this software are based upon public domain software 278N/A * originally written at the National Center for Supercomputing Applications, 278N/A * University of Illinois, Urbana-Champaign. 278N/A * Copyright (c) 2007, 2011, Oracle and/or its affiliates. All rights reserved. 278N/A "Location of Kerberos V5 keytab file."),
278N/A "Enable debug logging in error_log"),
278N/A NULL,
/* dir merger --- default is to override */ 278N/A/********************************************************************* 278N/A * GSSAPI Authentication 278N/A ********************************************************************/ 278N/A "gss_import_name() failed"));
278N/A "gss_acquire_cred() failed"));
278N/A "authenticate_user_gss called");
278N/A "apr_pcalloc() failed (not enough memory)");
278N/A * We don't use the ap_* calls here, since the string 278N/A * passed to putenv() will become part of the enviroment 278N/A * and shouldn't be free()ed by apache. 278N/A "malloc() failed: not enough memory");
278N/A * Put the keytab name in the environment so that Kerberos 278N/A * knows where to look later. 278N/A /* ap_getword() shifts parameter */ 278N/A "No Authorization parameter in request from client");
278N/A "apr_pcalloc() failed (not enough memory)");
278N/A /* Get creds using the mechanism that the client requested */ 278N/A * Try to display the server creds information. 278N/A "got server creds for: %.*s",
278N/A "apr_pcalloc() failed (not enough memory)");
278N/A "gss_accept_sec_context() failed"));
278N/A /* Don't offer the Negotiate method again if call to GSS layer failed */ 278N/A * Some GSSAPI mechanisms may require multiple iterations to 278N/A * establish authentication. Most notably, when MUTUAL_AUTHENTICATION 278N/A * flag is used, multiple round trips are needed. 278N/A "gss_export_name() failed"));
278N/A "Authenticated user: %s",
278N/A /* get the user realm specified in .htaccess */ 278N/A "note_gss_auth_failure: auth_name = %s",
278N/A /* get the type specified in .htaccess */ 278N/A /* get what the user sent us in the HTTP header */ 278N/A "No authentication data found");
278N/A "Authentication failed.");