From c551b954fe331408a6e08d5d45cc3f55fcda02bf Mon Sep 17 00:00:00 2001
From: Benjamin Renard <brenard@easter-eggs.com>
Date: Fri, 7 Sep 2018 18:42:24 +0200
Subject: [PATCH] Improve LSauthMethod::HTTP to support multiple methods to
 retreive user and password from HTTP server

---
 .../LSauthMethod/LSauthMethod_HTTP.docbook    |  54 ++++++++++++++++++
 .../conf/LSauth/config.LSauthMethod_HTTP.php  |  18 ++++++
 .../class/class.LSauthMethod_HTTP.php         |  53 +++++++++++++++--
 .../lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.mo | Bin 45446 -> 45598 bytes
 .../lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.po |   8 ++-
 public_html/lang/ldapsaisie.pot               |   6 +-
 6 files changed, 130 insertions(+), 9 deletions(-)

diff --git a/doc/conf/LSauthMethod/LSauthMethod_HTTP.docbook b/doc/conf/LSauthMethod/LSauthMethod_HTTP.docbook
index a924dbb0..513374d6 100644
--- a/doc/conf/LSauthMethod/LSauthMethod_HTTP.docbook
+++ b/doc/conf/LSauthMethod/LSauthMethod_HTTP.docbook
@@ -46,5 +46,59 @@
   </listitem>
 </varlistentry>
 
+<varlistentry>
+  <term>LSAUTHMETHOD_HTTP_METHOD</term>
+  <listitem>
+    <simpara>Permet de définir la méthode utilisée par le serveur HTTP pour
+    passer à PHP l'identifiant de l'utilisateur connecté et son mot de passe.
+    Cette constance peut pendre les valeurs suivantes :
+    <variablelist>
+
+<varlistentry>
+  <term>PHP_PASS</term>
+  <listitem>
+    <simpara>Dans cette méthode, le serveur HTTP défini les variables
+    d'environnement <literal>PHP_AUTH_USER</literal> et <literal>
+    PHP_AUTH_PW</literal>. Cette méthode est la méthode par défaut et
+    convient en cas d'utilisation de <literal>mod_php</literal>.</simpara>
+  </listitem>
+</varlistentry>
+
+<varlistentry>
+  <term>REMOTE_USER</term>
+  <listitem>
+    <simpara>Dans cette méthode, le serveur HTTP défini la variable
+    d'environnement <literal>REMOTE_USER</literal>. Cette variable ne contient
+    que l'identifiant de l'utilisateur connecté. Cette méthode ne peut donc
+    être utilisée que conjointement avec l'activation du paramètre
+    <literal>LSAUTHMETHOD_HTTP_TRUST_WITHOUT_PASSWORD_CHALLENGE</literal>.
+    </simpara>
+  </listitem>
+</varlistentry>
+
+<varlistentry>
+  <term>AUTHORIZATION</term>
+  <listitem>
+    <simpara>Dans cette méthode, le serveur HTTP passe le contenu de l'entête
+    HTTP <literal>Authorization</literal> dans la variable d'environnement
+    <literal>HTTP_AUTHORIZATION</literal>. Cette méthode convient en cas d'
+    utilisation de PHP en mode CGI ou encore via PHP-FPM. Pour utiliser cette
+    méthode, il faudra adapter la configuration du serveur HTTP. Par exemple,
+    pour Apache HTTPd, vous pouvez utiliser le module <literal>rewrite</literal>
+    et la règle de réécriture suivante :
+    <programlisting linenumbering="unnumbered">
+<![CDATA[RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]]]>
+    </programlisting>
+    </simpara>
+  </listitem>
+</varlistentry>
+
+    </variablelist>
+
+    </simpara>
+  </listitem>
+</varlistentry>
+
+
 </variablelist>
 </sect2>
diff --git a/public_html/conf/LSauth/config.LSauthMethod_HTTP.php b/public_html/conf/LSauth/config.LSauthMethod_HTTP.php
index 8166b1c0..815647b6 100644
--- a/public_html/conf/LSauth/config.LSauthMethod_HTTP.php
+++ b/public_html/conf/LSauth/config.LSauthMethod_HTTP.php
@@ -28,3 +28,21 @@
 
 // Don't check HTTP server's login/password by LDAP authentication challenge
 //define('LSAUTHMETHOD_HTTP_TRUST_WITHOUT_PASSWORD_CHALLENGE',true);
+
+/*
+ * Set the HTTP server's method to pass authentifcated user/password informations
+ * to PHP :
+ *  - PHP_PASS : server define the PHP_AUTH_USER and PHP_AUTH_PW environnement
+ *               variables. This is the default way using mod_php.
+ *  - REMOTE_USER : server define the REMOTE_USER environnement variable. By using
+ *               this method, only the user is pass by HTTP server to PHP and it
+ *               could be only used if you enable the "don't check HTTP server's
+ *               login/password by LDAP authentication challenge" option.
+ *  - AUTHORIZATION : server pass HTTP Authorization header value to PHP by setting
+ *               the HTTP_AUTHORIZATION environnement variable. This way could
+ *               be use when using PHP in CGI-mode or with PHP-FPM. When using
+ *               Apache, you could pass this information by using the rewrite module
+ *               and setting the following rewrite rule :
+ *               RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
+ */
+//define('LSAUTHMETHOD_HTTP_METHOD', 'PHP_PASS');
diff --git a/public_html/includes/class/class.LSauthMethod_HTTP.php b/public_html/includes/class/class.LSauthMethod_HTTP.php
index 5f0be440..9d73ee77 100644
--- a/public_html/includes/class/class.LSauthMethod_HTTP.php
+++ b/public_html/includes/class/class.LSauthMethod_HTTP.php
@@ -43,12 +43,46 @@ class LSauthMethod_HTTP extends LSauthMethod_basic {
    * @retval Array|false Array of authentication data or False
    **/
   public function getAuthData() {
-    if (isset($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_USER'])) {
-      $this -> authData = array(
-        'username' => $_SERVER['PHP_AUTH_USER'],
-        'password' => $_SERVER['PHP_AUTH_PW']
-      );
-      return $this -> authData;
+    if (!defined('LSAUTHMETHOD_HTTP_METHOD'))
+      define('LSAUTHMETHOD_HTTP_METHOD', 'PHP_AUTH');
+
+    switch(constant('LSAUTHMETHOD_HTTP_METHOD')) {
+      case 'AUTHORIZATION':
+        if (isset($_SERVER['HTTP_AUTHORIZATION']) && !empty($_SERVER['HTTP_AUTHORIZATION'])) {
+          $authData = explode(':', base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));
+          if (is_array($authData) && count($authData) == 2) {
+            $this -> authData = array(
+              'username' => $authData[0],
+              'password' => $authData[1],
+            );
+          }
+          return $this -> authData;
+        }
+        else
+          LSerror :: addErrorCode('LSauthMethod_HTTP_01', 'HTTP_AUTHORIZATION');
+        break;
+      case 'REMOTE_USER':
+        if (isset($_SERVER['REMOTE_USER']) && !empty($_SERVER['REMOTE_USER'])) {
+          $this -> authData = array(
+            'username' => $_SERVER['REMOTE_USER'],
+            'password' => false,
+          );
+          return $this -> authData;
+        }
+        else
+          LSerror :: addErrorCode('LSauthMethod_HTTP_01', 'REMOTE_USER');
+        break;
+      case 'PHP_AUTH':
+      default:
+        if (isset($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_USER'])) {
+          $this -> authData = array(
+            'username' => $_SERVER['PHP_AUTH_USER'],
+            'password' => $_SERVER['PHP_AUTH_PW'],
+          );
+          return $this -> authData;
+        }
+        else
+          LSerror :: addErrorCode('LSauthMethod_HTTP_01', 'PHP_AUTH_USER');
     }
     return;
   }
@@ -69,3 +103,10 @@ class LSauthMethod_HTTP extends LSauthMethod_basic {
   }
 
 }
+
+/*
+ * Error Codes
+ */
+LSerror :: defineError('LSauthMethod_HTTP_01',
+_("LSauthMethod_HTTP : the %{var} environnement variable is missing.")
+);
diff --git a/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.mo b/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.mo
index 4341af97b32d138d84be5fedbceb0f32e2bc82d7..4ec632f5d8b23ddfc6a198b9024f13c9c41eb054 100644
GIT binary patch
delta 7219
zcmY+}3w(}sAII^3Guzl^%r=J&W3vOpHfH8H=CCn`VMI=2i#g0;%(+_>qlE4plbq%B
zghe@|D3PS|lS7nBN`+2Rsh-dG{$HM+=X&+q`~Ul2*L_|8<8|L&&Hut{-Irdj%fa5u
z4M(s0jETUt6^%Kja;R#JiKMbV*2P-b1%0sq>)|-8i%T&J_hAa&#Sl#9L+RKBbFdT#
z;stDPjLW3dHl_s?Q?UZ>L2o>SvG@x5;5F2PZ(tbS#_||g$2PnwW|Jpk6`YMc!z@8A
zHM=nY&!Fye-jlnGxk7<Xn;WPH|AvA17Y1QKq-{V129rmjA2vtbs2%FYT~H71i@NSX
zOu*?_9k-&+zk(Xv_oR!$H42QD`4f9!O~$hm7NUCiJZc2?qdy)&P01<88%SGC2=k#H
zH$z?D8$06w%*FNC5pQD#wu)l>Gby+z=)@_E#lUD|nqmsJ!$MSpwxd3H6Z>FOTA?{z
zfH8O;yP=YJ$VT0-1l7QGsF6F0mGNW@^RKx)M}_9@CTh{N=2IHN9IS--=#9mwshWm9
zI1e>Ni%?Ux2Akn?sFAvaL+~5yikWf7%s@95VWoJ+Kaav}nkzrWN!Y%DG2QV69EV;F
zjoE|~a3Y2<v7>Q5>H$AsPwdsmj>vjUBmWUKA_<M{)J{X?CmpN0n%JQqifZ|0)b=@#
z8v39_&o(hVF`axFGRo$CWVXy5)KEtx+3Pyv81hnNmdwwn`_xD_rVS22HDD!bid|n&
zXiuRU*>GKebjBRP?)VKpi>b8kDf}3-aV)LuhzD^f{)K~aNORkPBd7=eh-zSRsvUtr
zIEs8HcF_J0Ve`{S(;w-KS?J`4unzfm*cJmAPX@(w!<IM`X`4CV<ky|^^*PC?n_Sdx
zn1}b{2JDBw<9N(z#Y>Fmn`0EzquAEg$*7(ma|~kK)PTV_3D;r{22nW(^H3vr6xB0z
zyEhbKe>{S^E+pML5j90;u^G=dE%~(Oay;q*Zp=a-#z!shg@bWBK7hXLLEUf!4#8J(
zIM!i4(s3@*C-WM1#=o%`J9o18IfSaO&L0<LGnB#v+=BTS)`j`TnW&zWp&ICu$y*K^
zpz=u=jVn-7aTsIpreherU{*{U)P1I6IG#o|{HrX+zaE87Y)(F7MxoZgUgSUXIe&7o
z5lc26=OMFVcB4k*I`+X#=1<qJMNP#uOu%^Nk<mB(upzEM2Fn~rJ<q2H;~z(%XAe7c
z(@-Bch#KnOa1`eDw2Sm8s{R)0M%lgi9>Arj8=gegm#NGGX@K33K{X}V2w!&m7VD7L
za4{}wSsJP#1*jW7fqr-b%i~$p2R_8A_%qf=Kf15$8>1dv;JDtYzlfU3;J#dgU2y<T
z#~^flK*5*77gz<qMIZbVW6_)OuYd`t>zZRlY>Q!-h2?M<dSO25`jM#XCOY{n3?QG6
zdX5{twg0zJ(2aJWdVCB+@HF<rPca3XlW0!IqOMzwRdFM-^UMK^z+bR32DA6n;3(8}
z4N(tnhg!5bSXukO#5u75X^~ltNw^ME@m<th`>_|bYO_%d+KCJC3Tkf0Fs>Tf)%>B&
z<|iDASp)49ZAVSfXQ&YlXCa00d{d8t9-QXb7Nf{BkZCp}F$)i&)`~ZqzZNDs_P}uR
zv8Y8?ikiAIWH8J{%)w-~jOrgj?Ydp)(&BoDf?D(uR>x0JbM*^qsJ-a68t9MySQ$06
z5vaM3#u^xhao7PhRbwz1S78&}iMroK)Kq*qgz>LM;Wic3Fof}n!35NWeH;g&Zd8Dm
z?&JF(H3j|h>~FirQ4QLO+7)G}hMdPS=r!Da`xT*{vkO_@=Jnw&hK)jv5q6)?$1dbI
zu{EaV+lEX=jnHgN#z#;Od=a(UUqN-`O;p3LVHDoNnHW-F7x_|D2e+Z7;H-;+hWZD`
zzc7^C|3Q1>x~K;?M6K#%#|+ei`=WX@1T{4!s0PeMUH=&Berp}~p*nU7BhgiUq@BAM
zjG!VNYvN$6jni;6u0+~qyhhmujY41Y@mL9`Vn>{hUGXh!hhc@D?|IV?b^U78&~LzT
z+W)sHu)|C~Ptl1Z*bS>NadI#w;&x2M3#bPKGjF_w&0x&N-N<@1zau-++|S(`;$Ec6
zTtYRlYmt3bFTuvz|K}(KaKd-IeNlv<UO;i!1>2xT<WZ-7J!;7Jqk8l<`r}9FhgVRm
z`#J{UU2KH`6YO&`k>zD_@d2K14pMjmLnpGZa5FL}CVrCrrQ*hi$jcSmk(!HKVlLns
z%%04=<29s{X2=w~n9m>^%cO9UcaC`q)A1(u#>A<Ne=iF2DD=S(F$d$O*`Ck9O!DK{
z7X7E&A@7PB>NVIN?_eUfoMHbhI0lt3#!h$?xwY|TE5ze0)cv;3Wc)KIT%{rl<7e6J
zRg4<?t;lqn8`uB`&bGgF9>sUazsA?`C5C4p&Sp6K<2ht-OyV5-vwkz`fj$r0#n=h8
zjY}WqLf!@DFcpts?YVrD;SOwv{_|`Px?vmgWmp&AL5<W8*c3CEH=Un~X}BLd<4tUd
z%^$UEU?SEg-;K<cIpcB)?dP*+sW^a|%d`cyA$xErd6iP<$0I&Keil1ogN1A<9FH2Q
z3XANTnSz?qtEl^?(Ypb71a)25<7{no&85Kfm_Lwvnv%u#1@SjVlecDN(n*ttg?JV7
zvF8%I&0av&2QKAbyf_tEujVr5Va_t!kTPsV?)#)|cn0!Zmno&78<unPOBY9B4?KuP
z==YRe%~Mh5KSN!gwA}upS%JCaComSnSJ=7DKs~SoBXA$;{5zO|zoJX~ztu|n?mmnK
zoH&p1*lv~WQ6cI^@1h<Qz<3YG;h2giuq*zFY;}{l#xA~>a2R>Q({`j5V{`JaFdJ*F
zW%_u&8BL)hE=M)s0yf3;XYBTyj5_}^PC>7Ab~{bO6!Kd*3}c?PZ_ov(#rO%TVKvv=
zRbPOO$)Cea{1`pI|06fpRsJA$<HRmZz&n_P^*7oZ_eUR{cPv9)cL+o98fu8|qIO60
zCOh{fsQk2J#AZ99MVlFa^<W1TtT*!+R>7hz_SHHEtCE+ZAFf69U<+2j4^a)ej1}=J
zR>NE9i+)?}50uInKpx^)7lX(fZ*|%4<+fDBQIU)O_z+gdMHq;iFckOVa6E}=*kGHT
zs(jP~R-vxjf?BMHF&YD&vm=y*x_@WXb-i8AiBZ^)irE-}+ffa81Iy#5*cPv1Cyd^1
z=WsNtL1m~0h3&BaT<?V~$Zw%`QT$H(HNFZ*keAzKUrer%6xva-5jBLLV-$XmK3HY9
z{q0vB)stE{5IbNlK7+CN6V}1-f7xF)tsIA7ZR#IJUAG<!@f42J4orUD_Iy1y=ENCP
zkN>~`yl;>Ffl>*T$DuE#pf|R`VC;YuFc-_=P}E3{Ky_#iYUDO!BwqLA%)kF$J104)
z6N51fAHrI=95s|>s0Vz9YRGM@iRJduNKDfo4n6!Z5l229gVB%pl(LR7M5(7l#|Lpj
z!>=J>P5t*^tD8=oyXMsN!RF-Mh;l>>xrS9odGZf29xD<}DEB1Rx;KP|hq7Qin@^Kf
zo3qT5`ON)ZXn5TpDa8>wJ|OxMvy^arOeDGk!@}$H7BjyQ>S_R={~P@Yt<EorpNL3z
z_ptEXP|nUF3r8I_(Tm7*@>ogq_MEjFVk+f@POhD+gE{f6<yWws`{l4|E|!9sPv|&q
zF>fGW1)ig+^Mq`&D5rdy@_FKW;wo|P2%_*ZapYcw<Nf$L5$JsWamt5?x746B6w*2I
zE$TQ&c$4cjJ5d!JJ;|#$A8vrtY_++L+M;h0XPvs`j$#tAlW0oh6R#0Eej)Y~ff|s`
z&W+j5o-didumg3;L>nU8IX{<rE!q_F3Al;)hG<RxZ>&mGBD#>@!h1)53iX_OsE)O5
zYLO@7K269#qCFLCThDQuzc-0I;sH;M{qroWCbEcTL<K&x4qqkSBkB<|iG##<L=Db2
zBXne;zf-m~_9f+hx4O5hF(;PZtHqAwKE&6QE8{Y(gu_rr0_C>2g7}C?BHw}!5swjH
z5gUnW)Ym2SuFz4Rat5K}5yHz;;vdr0sk}o{L_BIM%_Y1*#5f;tQ(i=r5H|=PqJ?vA
z1Lb?igHGW|_x2j$u2oKU)Nz~RO2-P0yf4iUM0e+os(wO$IOY+Jh~J5HLdRmF5!YVy
zWW2%fXCj)q8t98Hw7k3i&kc`pVhB-(I7R4);QS2iMR==%W46WfZ>vbkAzbsOQ+FTb
zj+8eOQ;5!l-o2NJr-=o`Xd-~<V%*1T2G`h5@e1)daqn19p^p3en$=t<DOKgBf8t=G
zm^eW^Oxz{v6RkL(gi*vFL;;~AoY+IeD&c6!b-}pAlksDdd>7>xo%{v-!YPlicJTab
zqddt=L<-TJ7(~2J_z|hxBoUin2mF=Lq5rKm5`)|)!ei^UCA)VdPzWRc1XGE3i34SU
z5zRxJX7=sdE3#$e<WU8Y^=FpkO`089P*hSlX?#&p!MK8=$&pkQ<_#ZP5Ls9pIj*p{
zxUguXd-RO(vYtsXjVq=#N=%JRYSFS;qT4mJ_CIM-*|wqY*GzTpJvQ&3yX43I|LyNR
Xvv_jkxV)l?Q}T)?7nF^j5s~^IUfR?o

delta 7091
zcmYk>2bfjWwE*BP3`H0~K<dz8C?aKOgGiSyMMb2kfPgd+6bmYPRcshVa6rL4uz(e7
zu;Gi1Sb~XBNt9qgj16N6n#2~-{A<qTeQ$rP`|q{Sx##S&%ekN%KdNxmhZS;r>J+R^
z%D6*PYQi<uQhHv!uwJyLbeP6s)@D<dvI-}#6;EMHUdoZYgFX2L4`(Z18pu)}&!wEg
zS2!r8Tq<ssQg01&cqngU0q<iwKE%r0#klbv*5@az!~=A%RIzzVquGMBxsdLWa&$`C
zz(W3(ah)CIc`l_lR6KOr!?^Khtii8Xi$5_sP}m}+I;_j8Y|FS%7siE488;rnIPWAL
z$$4zZn;6F*Vhrx{VNPY2N<6`r9Ls9Pb0{Y>p72&i2kvBb-p^t_nRgHMF%_7Pc;YsU
z^9OSnM{)vJaR@)*G3?md=!{TVq!I_7WIG;UcNVuvX#giPI<%h0@O_SFYrTj$J)dp4
zgU50|JFu_DxZdfE4z6U3+=D!fPqa1vF_*vBFq-c(7R`~q6+<|PHF+WnIFm6|b6J^7
z7*lj1W6G{&53Xa3)T=y|yE%%z+dG%bc_x2uZ~SMdEY#ibHJ;6qBT^c}&0NTDxQWv{
zrgRnyOzeD~$GE`<9LIs3vJqLuqvU^Mj7XEt+0@Qu<WJ<SnCp@a{WwO?*D$uv4#v>`
z!a*F+HQPp)(dee_G)rk8W2g&DQd+=XG&|`I#`j-lKUV3M-FPTtYF9I^n|o2^v^YVl
zhe-1|hBxz8e#|wzQtw8yvEB{g98Tl?JcWh5vX0MZ-1s&|$M$k8tCgBIPUc{4r@rM<
zC7a(vq*7`~bJ?7?us@%oK}bKa4?7rFeM++!`8vk&KhtQZiW*}VlyDNq@g&~EMf`=c
zx#;M4pj=9CmRG!~`eskQDDTsZ4pcXOXLA&f=hHlywH%BgJcIFM5Ap;y@c0uspK;#y
zyv+w@Q?!gR)%)1m{Zms{i5m>!NIuHw`OiFs6OGqYKE}9UZF}%kp2?WHS2>Vf&5LJA
zXK@%G;1d3eah<tCv-X$hPpaXh++vmSDzo?kO-t%9JbRKEj79b+{Yih#=PgELi);vE
zD(0~*H{^YRW+Q#h7?EO6Rm7!?j;~=W{&S@9cTTE5Dq927=ucYZV*=k{2bS0~W+P2y
zJjpta=eLaWM_HK$E3IWL;$1ZAslZC^$RRXHX))t|kFq@vj4}QLRoYsj@r5~zp}w1Q
zS#eypD9>QDZ)9BPM_Sma|8dy`&!u&hp5YPvfd(_Rv0yrJLEiOjE`OQPu}^a<(UZEy
zDK6NTRk?(fxQy|I%UPFqu$YfC&VQG2<GO|;9Ls25!I;YD*qPsRGTWV)y)iFi6?ty8
zN^O<(tjsNJ$KUW!zRfuCBUa-Vtk3UQku}Xz1=eAlUypHK^L%~;3*|i+_Zh?jj;HJ7
z(j=95;zc~1OL-EnXHR~_nA64@<GkUl%j0OrrCDskO+1XxF*^JP<GkIB8-K|*{DpB|
z8+){N?EjuB(WBuk;b@lf62@FV&RDfSGCDNb-dw>O7<1dmxW>>9_o1)pc247W?8S*w
zvZ-0g7~vhP&(~St{^`@G@C&x)*EFrEo)tHea~X@}H*Cs1d4FP&ys?);EV^EdshdF$
znO5+4?#;J%vvp$IO<}C9i<yfaEmvvCYZ-I3i80g<Gdi}7)%gr#XkTH>{Z2OGTWrt$
zjHzm5xax2iyKpk&dMg-HaU+{@^Qp$afy#CbZTWWo#6yf<e4!fSLUsAxA<kh;LBWjd
z?{s|_9h%J86*Cwexta_3F#EB|X<o~mLhCl2%`^D&X}N5l_n4Wz;Wn_Z10ORw&}vpT
zXC2v1-i>j?*^Je`kntqvGtOVj*4)U8xScWA{by$nIDs(*%NQelYc5~8pY=3sV_f((
z#?<U)tk%7Gzs?`8aC-Jcg^a0b!{|U)#`#Avt~V<0bjE|7#}?emn7Z6wRGO%K#m1~Y
zCmY(foG%|r_e>A7GV9OHMxZHc%8NOKJvfRNZ~$N6U>3~F&L7Sg`f*&y&9tF%sgAqE
zf%!a^&*rUe0=vp5vXs{_ZtxtveN%N4IGR&w-KBdNznYa@y(6blQ~DL7gWq!m`<<D+
z5wBul?ElA9;zhBY@dA2_!}&R5M7l4^+Q%{$(M(q1MXb){tjZf0t9u=5@jf2Sr&!2u
zX<4O;i?iR7Ib7-f>31qu@PxDclyVoHn+BcjCB#Q)s8ZJ@*<U`d;VtqXc^=oElMQL%
zx!GdAkTz2KkX|Keu#*OI15e-{9><dNjsJL+%T<o&TZ|`fzcd@F#q2NN#&P_fG1Mb2
z$bN3`VpsV-wq&CVv;1hfR62tl_z~keHEoGwIEEv+`Xb{W+v*(+apRiHvVD6JkC1Pt
zt(v~%Ydr2^3yUob%M^ahi5zGc4Mti=TRs(Dn%(eB#v*)xai9H+>$Sejy5Lop`NDLS
zI+tgwb_s{dx3V99U_4pr@@#}Av%7o?<M{hLicQVmFivD2Ze+~;ZZ>1RD^oH{sYl*>
z>C&lL?y77KZ|8Ik4X@6AJTBnL^4*-uUe{!+_(ram@1l*6&RUVJmG>A^Ip*5z!nbp>
zyp6|<^Dd#;OMj=?NHedqqnO*H(pP29_1VwkW_qZ!gY!6MW%hT&Cpbyo<c6&MT%Im}
zpVns@wkjL?ZH$f-t<FYZ5r@dPFmAk`v$){K@<o_Sud9sJ(6TK1H`!v&mA}ter6bm4
zUs%u1@}D_@oz`Z*cFP%ayM;02d)S1HZ_19B@)-Fv#%|lhrfhw4yx6o1Qt6=KZpIV6
z!MITGb=i&1;c4<$SjtYue-vkP5g+Cfwzwsm!ZnPM`Zs%V?60#I)s;L#zLPN`2RJ)=
zH28nAMRgBH$lqn0P`n|fb2*>qb1!>x(#GsYD|w>)AMD2=w`Lu?oP*`BGDhsM+p_Bp
zU@Y!y^8SgrV>KLpd-l6Moh9<?85e$*mE-swnMFKO-in8F9NTdgkLPt9&pr9P+or7j
z3LdTfEye@X+3X%1vDx_7jsqI1a3AY(KdZ9f&g=<l@KAYQMu&#68pp5!Co#Uim=(E{
z@ycD6cLi(7Z(@Dk#rAyqPUBx)<r57J`3-BZ`d!)2XCs~_@4};aBfImDj2oo8v-4^&
z7Hey^;W>;ETF<!tgRIA=^6js)qx|EXO03q}_hcRD%u4d%?9VYA%Ii3SI~g4+x;N|4
zB{a?HN%rQX`?6iMn)BspOZKC)fPJK|aR95`pN(K{luBz26IhuSuz;5`p5#hS;eDLI
zN)KdnK9$Yo%h`&X^1j4o^3T|gRUgdW7hSnfehcHtt3FgdwYk(oC7yUD3ptOCcwRnV
z#VYa*jE>#OI=qjuCZ1-@`OA!v`~%~G_Ay4T@Zs!lJSQ;nC9KYE<?ZJGMU_|-pRg$p
zFov?|k?aO1GCFoD8*>2<Vej}*;^t3@cJigH%_?G#dXxp?>hhZXuRVr;p13pGM#qO@
z%cmg@eo~%g+o-2}l&B!uYL8)!QXu~`+w)M-MSYz3b=f2Jit1TV<(n}ktEr>r&Aar2
zdPOb2R%<V!>=d!ZFN#EYOLQq~TED2++bn%A;!&&n{?DOkC_WV5h~{Od)GwNFxTD4|
zHD;7XJVXr7=WY3m_7lpFW*g!>^=tBZ?A$1qh}c}ui2h}-)^CurM$(lc%JUiNMV963
z-ST&c(QB2j?@<4%_(FUn4whOfzZL&`up#dx{!SF;zyB-sZQ_-9s6VI-aNzHZvP)Ey
z$7}YiXi&z=56geK1LGAP<uegm^pE0I5oJwA`RCa_?au5!VsU$UtN%>HM@5Yo)S>wc
z->YGfI3NaTD-nIgvH9bdX^%zQL%x`Ih<)N{`J0TlX-zRq{tq536IEJjJ6Npw)I{Em
zkHn<Lo*$^eHZCv!_W6~VA*PnMWFH%`PK*>iL{;C}z-PtlBHj%biYLYAqM_s6MU)Y&
zmak_m*-NTyZ^MFICkJjg*vez%mBgp&wYZ8kIGs^Cs`uww@fXomzL^(`YekgXMSblp
zM7%4av{4@{qAV8`%4_}s-9Y1ak~75>Sz~&ayG3#S3pc8-5Fd*#MZ7^v^T%#eKUhxB
zS5}v8YgClGIiEe9_pZD*<vlcSyf62Q(fKPz^Y!teTrN6^AH+Zr<vMYsbKfq{{09U6
zQ?%CBh?UtpmiNg2cfsczI8`(kFN-Kej$gpzM7(pOEXyeWH&qMuy3YB1zAfH|L)15k
zbHy+*RJ<o{5m$-%qEHM^Wjh<!X>^b3Uh#oASZ-BmR(7CqgWOAMbzJl(o+6fr7sRFF
zKcZOlalC}B#gAgPh*BgT673>Uj&fcdt}M^|q{_FbKc3IG@^AV2%*?^*Pb!tf6QZXW
zBTg1?h^nHOi*#jY4(7KaO8jrMIjmXsW>LGA{bUErkt+4%@32(7CLY_`v`MdeTi2F!
n>s+mOr|u;!N=o~5?Opc9v}XU8mUP|v!?c}^x7NO>M(KY6?v|zw

diff --git a/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.po b/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.po
index 0eda1293..dcaeb4d9 100644
--- a/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.po
+++ b/public_html/lang/fr_FR.UTF8/LC_MESSAGES/ldapsaisie.po
@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: LdapSaisie\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-08-31 17:08+0200\n"
-"PO-Revision-Date: 2018-08-31 17:10+0200\n"
+"POT-Creation-Date: 2018-09-07 18:40+0200\n"
+"PO-Revision-Date: 2018-09-07 18:41+0200\n"
 "Last-Translator: Benjamin Renard <brenard@zionetrix.net>\n"
 "Language-Team: LdapSaisie <ldapsaisie-users@lists.labs.libre-entreprise."
 "org>\n"
@@ -1426,6 +1426,10 @@ msgstr "Afficher la fenêtre de recherche et de sélection étendue."
 msgid "Invalid value"
 msgstr "Valeur invalide"
 
+#: includes/class/class.LSauthMethod_HTTP.php:111
+msgid "LSauthMethod_HTTP : the %{var} environnement variable is missing."
+msgstr "LSauthMethod_HTTP : la variable d'environnement %{var} est manquante."
+
 #: includes/class/class.LSformElement_mail.php:51
 msgid "Send a mail from here."
 msgstr "Envoyer un mail depuis l'interface."
diff --git a/public_html/lang/ldapsaisie.pot b/public_html/lang/ldapsaisie.pot
index 15754197..e5b1870d 100644
--- a/public_html/lang/ldapsaisie.pot
+++ b/public_html/lang/ldapsaisie.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-08-31 17:07+0200\n"
+"POT-Creation-Date: 2018-09-07 18:40+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -1215,6 +1215,10 @@ msgstr ""
 msgid "Invalid value"
 msgstr ""
 
+#: includes/class/class.LSauthMethod_HTTP.php:111
+msgid "LSauthMethod_HTTP : the %{var} environnement variable is missing."
+msgstr ""
+
 #: includes/class/class.LSformElement_mail.php:51
 msgid "Send a mail from here."
 msgstr ""