This is the authoritative reference for the HTML templates used by the Pubcookie login cgi.

Note: The filename of each template can be set in your config file, if you desire alternative filenames. The name for each config variable is tmpl_{default_file_name}. For example, tmpl_login is the variable that controls the filename of the login template.

copyright

Your copyright string. Only used on redirect with POST page.

error

Template displayed when there is an internal error.

form_expired

The error displayed when the user sits on the login page too long before authenticating.

login

The template for the login page. The main login page, with automatic variable substitutions for: the login server URL, the reason for the redirect (pulled from various login_* templates), the user input field (also pulled from other templates), hidden fields maintaining state information, GetCred hidden fields, and version string.

login_bad_auth

The error displayed when authentication failed. File containing HTML snippet to display on the login page when authentication fails.

login_bad_auth_static_user

The error displayed when authentication failed and the user input field should be static.

login_cache_creds_wrong

File containing HTML snippet to display on the login page when the application requests credentials that are different from those in use already by the weblogin service. The error displayed when the single-signon credential is not the type that the application is requesting. (Rarely seen.)

login_expired

The error displayed when the login cookie has expired.

login_nolcookie

The error displayed when the user has no login cookie or has an invalid one.

login_pass_form_field

The password input field snippet.

login_pinit

The login message displayed when the user visits the login cgi directly (i.e., without a granting request cookie), rather than being redirected from an application.

login_reauth

The error displayed when the application has requested that the user reauthenticate. File containing HTML snippet to display on the login page when the application requests reauthentication.

login_unauth_grant

The error displayed when there is no authorizing host key in the keystore for the application server.

login_user_form_field

The user input field.

login_user_hidden

The hidden user input field.

login_user_static

The static user field for reauthentication.

logo

HTML that includes your logo. Only used on redirect with POST page.

logout_already_weblogin

The logout response when the user has already logged out of the login server.

logout_app

The generic logout response when the user logs out of an application that has no customized logout message.

logout_app_custom

The logout response text that wraps customized logout message.

logout_part1

The top part of the logout response page.

logout_part2

The bottom part of the logout response page.

logout_postscript_still_others

The logout response warning that sessions may remain open even though the user just logged out of a specific application or the login server.

logout_postscript_still_weblogin

The logout response warning that the session with the login server remains open.

logout_still_known

The status or logout response text that displays the userid tied to the login session.

logout_still_weblogin

The status or logout response text that reminds the user they're still logged and under what userid.

logout_time_remaining

The status or logout response text that displays the time remaining until the login cookie expires.

logout_weblogin

The logout response text displayed when application logout also clears the login cookie.

nonpost_redirect

Template for the redirect back to the app after login. The redirect page back to the target. The use of script-no-script tags with window.location.replace (requires JavaScript 1.1) doesn't work well with all older browsers (e.g. Netscape 4.x); for best compatibility just use meta-refresh by itself, without the script-no-script tags.

notok

Base template for rare occasions where things aren't okay.

notok_badagent

The response text added when things aren't okay with the browser.

notok_form_multipart

The response text added when things aren't okay because an unsupported multipart/form-data request was made.

notok_generic

The generic response text added when things aren't okay.

notok_need_ssl

The response text added when things aren't okay because SSL is required.

pinit_response1

The top part of the login response template displayed after a direct attempt to authenticate to the login server.

pinit_response2

The bottom part of the login response template displayed after a direct attempt to authenticate to the login server.

status

The template for the status page displayed when the user goes to the login server directly. The status page displaying SSO time remaining, with automatic variable substitutions for: refresh headers, the user name, and time remaining.

welcome_back

The login response text displayed after successful authentication on a direct request to the login server.