.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.40) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "WebKDC::WebKDCException 3pm" .TH WebKDC::WebKDCException 3pm "2020-12-21" "perl v5.32.0" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" WebKDC::WebKDCException \- Exceptions for WebKDC communications .SH "SYNOPSIS" .IX Header "SYNOPSIS" .Vb 2 \& use WebKDC; \& use WebKDC::WebKDCException; \& \& eval { \& # ... \& WebKDC::request_token_request($req, $resp); \& # ... \& }; \& my $e = $@; \& if (ref $e and $e\->isa (\*(AqWebKDC::WebKDCException\*(Aq)) { \& # you can call the following methods on a WebKDCException object: \& # $e\->status() \& # $e\->message() \& # $e\->error_code() \& # $e\->verbose_message() \& } .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" Various WebKDC functions may return a WebKDC::WebKDCException object if anything goes wrong. This object encapsulates various information about the error. .PP This module also defines the status codes returned by the WebKDC functions. .SH "CONSTANTS" .IX Header "CONSTANTS" The following constants are exported: .IP "\s-1WK_SUCCESS\s0" 4 .IX Item "WK_SUCCESS" This status code never comes back as part of an exception. It is returned for success. .IP "\s-1WK_ERR_USER_AND_PASS_REQUIRED\s0" 4 .IX Item "WK_ERR_USER_AND_PASS_REQUIRED" This status code indicates that a function was called that required a username and password. The user should be prompted for their username and the function should be called again. .IP "\s-1WK_ERR_LOGIN_FAILED\s0" 4 .IX Item "WK_ERR_LOGIN_FAILED" This status code indicates that a function was called that attempted to validate the username and password and could not, due to an invalid user or password. The user should be re-prompted for their username/password and the function should be called again. .IP "\s-1WK_ERR_UNRECOVERABLE_ERROR\s0" 4 .IX Item "WK_ERR_UNRECOVERABLE_ERROR" This status code indicates that a function was called and an error occurred that can not be recovered from. If you are in the process of attempting to log a user in, you have no choice but to display an error message to the user and not prompt again. .IP "\s-1WK_ERR_REQUEST_TOKEN_STALE\s0" 4 .IX Item "WK_ERR_REQUEST_TOKEN_STALE" This status code indicates the user took too long to login, and the the request token is too old to be used. The user should be told to retry the action that caused them to be prompted for authentication. .IP "\s-1WK_ERR_WEBAUTH_SERVER_ERROR\s0" 4 .IX Item "WK_ERR_WEBAUTH_SERVER_ERROR" This status code indicates something happened that most likely indicates the WebAuth server that made the request is misconfigured and/or unauthorized to make the request. It is similar to \&\s-1WK_ERR_UNRECOVERABLE_ERROR\s0 except that the error message to the user should indicate that the problem is most likely with the server that redirected them. .IP "\s-1WK_ERR_LOGIN_FORCED\s0" 4 .IX Item "WK_ERR_LOGIN_FORCED" This status code indicates that a function was called that required a username and password even if single sign-on credentials were available. The user should be prompted for their username and password and the function should be called again with that data. .IP "\s-1WK_ERR_USER_REJECTED\s0" 4 .IX Item "WK_ERR_USER_REJECTED" This status code indicates that the authenticated principal was rejected by the WebKDC configuration (usually because WebKdcPermittedRealms was set and the realm of the principal wasn't in that list). .IP "\s-1WK_ERR_CREDS_EXPIRED\s0" 4 .IX Item "WK_ERR_CREDS_EXPIRED" This status code indicates that the principal we attempted to authenticate to has an expired password. If possible, the user should be prompted to change their password and then the operation retried. .IP "\s-1WK_ERR_MULTIFACTOR_REQUIRED\s0" 4 .IX Item "WK_ERR_MULTIFACTOR_REQUIRED" This status code indicates that authentication was successful but that authentication with a second factor is also required. The user should be prompted for their second factor and then the login reattempted with that information plus the returned proxy tokens. .IP "\s-1WK_ERR_MULTIFACTOR_UNAVAILABLE\s0" 4 .IX Item "WK_ERR_MULTIFACTOR_UNAVAILABLE" This status code indicates that the desired site requires multifactor, but the user does not have multifactor configured or does not have the correct second factor to authenticate to that site. .IP "\s-1WK_ERR_LOGIN_REJECT\s0" 4 .IX Item "WK_ERR_LOGIN_REJECT" This status code indicates that this user is not allowed to log on to that site at this time for security reasons. This is a transitory error; the user may be permitted to authenticate later, or from a different location. This error message is used for rejected logins from particular locations, logins that appear to be from a compromised account, or accounts that have been locked out due to too many failed logins. .IP "\s-1WK_ERR_LOA_UNAVAILABLE\s0" 4 .IX Item "WK_ERR_LOA_UNAVAILABLE" This status code indicates that the site requested a Level of Assurance for the user's authentication that is higher than this user can provide, either because of insufficient proof of identity available to the system or due to an insufficiently strong configured authentication method. .IP "\s-1WK_ERR_AUTH_REJECTED\s0" 4 .IX Item "WK_ERR_AUTH_REJECTED" This user is not permitted to authenticate to the desired destination WebAuth Application Server at this time. This may be due to local policy, security limitations placed on the user, missing prerequisite actions that the user must take (such as training or a usage agreement), or some other local factor. .IP "\s-1WK_ERR_AUTH_REPLAY\s0" 4 .IX Item "WK_ERR_AUTH_REPLAY" This authentication attempt appears to be a replay. Replays may be rejected as a security measure to protect against people who walked away with a browser open and left the WebLogin form submission in the browser cache. .IP "\s-1WK_ERR_AUTH_LOCKOUT\s0" 4 .IX Item "WK_ERR_AUTH_LOCKOUT" This account has been locked out due to too many unsuccessful login attempts. The login should be retried later. .IP "\s-1WK_ERR_LOGIN_TIMEOUT\s0" 4 .IX Item "WK_ERR_LOGIN_TIMEOUT" There was a timeout while attempting to log in. The login should be retried, though multiple errors could mean a problem outside of WebAuth. .SH "CLASS METHODS" .IX Header "CLASS METHODS" .IP "new (\s-1STATUS,\s0 MESSAGE[, ERROR[, \s-1DATA\s0]])" 4 .IX Item "new (STATUS, MESSAGE[, ERROR[, DATA]])" Create a new WebKDC::WebKDCException object. \s-1STATUS\s0 is one of the status constants defined above other than \s-1WK_SUCCESS.\s0 \s-1MESSAGE\s0 is the error message for the exception. \s-1ERROR,\s0 if present, is a protocol error code that caused the exception. \s-1DATA,\s0 if present, is additional data about the exception, currently used to carry the \s-1HTML\s0 error message to display to the user if one is available. .SH "INSTANCE METHODS" .IX Header "INSTANCE METHODS" .IP "data ()" 4 .IX Item "data ()" Returns the additional exception data (if there was any). .IP "error_code ()" 4 .IX Item "error_code ()" Returns the WebKDC protocol errorCode (if there was one). .IP "message ()" 4 .IX Item "message ()" Returns the error message that was passed to the constructor. .IP "status ()" 4 .IX Item "status ()" Returns the WebKDC::WebKDCException status code for the exception, which will be one of the WK_ERR_* codes. .IP "verbose_message ()" 4 .IX Item "verbose_message ()" This method returns a verbose error message, which consists of the status code, message, and any error code. .IP "to_string ()" 4 .IX Item "to_string ()" This method is called if the exception is used as a string. It is a wrapper around the verbose_message method. .SH "AUTHOR" .IX Header "AUTHOR" Roland Schemers and Russ Allbery .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBWebKDC\fR\|(3) .PP This module is part of WebAuth. The current version is available from .