rack-auth-kerberos 0.2.1 → 0.2.2

data/CHANGES

@@ -1,3 +1,6 @@
+= 0.2.2 - 13-Jan-2010
+* Added some basic logging, accessible through the request.env["AUTH_LOG"] variable.
+
 = 0.2.1 - 28-Dec-2009
 * Minor internal refactoring and documentation updates.
 

data/README

@@ -26,6 +26,9 @@ and env['AUTH_FAIL'] is set to an error message explaining what went wrong.
 Note that if env['AUTH_USER'] or env['AUTH_FAIL'] are already set, then the
 request is forwarded normally.
 
+Some details are logged in env['AUTH_LOG'], primarily for debugging purposes,
+if needed.
+
 = TODO
 Handle other types of authentication, e.g. HTTP basic auth with a username
 and password are submitted, instead of only looking in request params.

data/lib/rack/auth/kerberos.rb

@@ -4,7 +4,11 @@ module Rack
   module Auth
     class Kerberos
       # The version of the rack-auth-kerberos library.
-      VERSION = '0.2.1'
+      VERSION = '0.2.2'
+
+      def log(msg)
+        @log << "\n    #{msg}"
+      end
 
       # Creates a new Rack::Kerberos object. The +user_field+ and +password_field+
       # are the params looked for in the call method. The defaults are 'username'
@@ -28,6 +32,7 @@ module Rack
         else
           @realm = @kerberos.get_default_realm
         end
+        @log = "Initializing Rack::Auth::Kerberos"
       end
 
       # The call method we've defined first checks to see if the AUTH_USER
@@ -57,6 +62,7 @@ module Rack
         user = request.params[@user_field]
         password = request.params[@password_field]
 
+        log "Kerberos user: #{user}, password length: #{password.nil? ? 'nil' : password.size}"
         # Only authenticate user if both the username and password fields are present
         unless user && password
           return @app.call(env)
@@ -65,7 +71,8 @@ module Rack
         # Automatically append the realm if not already present
         user_with_realm = user.dup
         user_with_realm += "@#{@realm}" unless user.include?('@')
-
+        log "Kerberos user_with_realm: #{user_with_realm}"
+        
         # Do not authenticate if either one of these is set
         if env['AUTH_USER'] || env['AUTH_FAIL']
           return @app.call(env)
@@ -80,6 +87,7 @@ module Rack
             when /integrity check failed/i
               msg = "Invalid password for '#{user}'"
             else
+              log "Krb5Auth::Krb5::Exception: #{err.message}"
               msg = "Error attempting to validate userid and password"
           end
 
@@ -87,6 +95,7 @@ module Rack
           env['AUTH_FAIL'] = msg
         rescue => err
           env.delete('AUTH_USER')
+          log "Kerberos Unexpected Error: #{err.message}"
           env['AUTH_FAIL'] = "Unexpected failure during Kerberos authentication"
         else
           env.delete('AUTH_FAIL')
@@ -100,6 +109,8 @@ module Rack
           @kerberos.close
         end
 
+        log "Kerberos sign in results: AUTH_TYPE_USER=#{env['AUTH_TYPE_USER']}, AUTH_FAIL=#{env['AUTH_FAIL']}"
+        env['AUTH_LOG'] = @log
         @app.call(env)
       end
     end

data/rack-auth-kerberos.gemspec

@@ -2,8 +2,8 @@ require 'rubygems'
 
 Gem::Specification.new do |gem|
   gem.name      = 'rack-auth-kerberos'
-  gem.version   = '0.2.1'
-  gem.authors   = ["Daniel Berger", "Charlie O'Keefe"]
+  gem.version   = '0.2.2'
+  gem.authors   = ["Daniel Berger", "Charlie O'Keefe", "Marty Haught"]
   gem.email     = 'dberger@globe.gov'
   gem.homepage  = 'http://www.github.com/rack-kerberos'
   gem.summary   = 'A Rack library that authenticates people using Kerberos'

data/test/test_rack_auth_kerberos.rb

@@ -13,7 +13,7 @@ class TC_Rack_Auth_Kerberos < Test::Unit::TestCase
   end
 
   def test_version
-    assert_equal('0.2.1', Rack::Auth::Kerberos::VERSION)
+    assert_equal('0.2.2', Rack::Auth::Kerberos::VERSION)
   end
 
   def teardown

metadata

@@ -1,16 +1,17 @@
 --- !ruby/object:Gem::Specification 
 name: rack-auth-kerberos
 version: !ruby/object:Gem::Version 
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors: 
 - Daniel Berger
 - Charlie O'Keefe
+- Marty Haught
 autorequire: 
 bindir: bin
 cert_chain: []
 
-date: 2009-12-28 00:00:00 -07:00
+date: 2010-01-13 00:00:00 -07:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency