This file is indexed.

/usr/share/weblogin/generic/templates/error.tmpl is in webauth-weblogin 4.7.0-6build2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <http-equiv="pragma" content="no-cache">
    <title>WebAuth Error</title>
  </head>

  [% IF notdefined %]
<!--
This is the template for the WebAuth error page.  It is displayed whenever
the login.fcgi script on the weblogin server encounters an error.
Variables used:

err_html                  : the complete HTML text of the error
err_bad_method            : browser submitted login page via GET not POST
err_confirm               : incomplete data for confirm page
err_cookies_disabled      : cookies disabled in the web browser
err_insufficient_mfactor  : site requested higher multifactor than user has
err_insufficient_loa      : site requested higher LoA than user has
err_lockout               : account locked out due to login failures
err_no_mfactor            : site requested multifactor, user has none
err_no_request_token      : no request token (user went straight to weblogin)
err_replay                : authentication was a replay
err_sendauth              : sendauth function returned non-zero status
err_webkdc                : the WebKDC returned an error
err_msg                   : error message from WebKDC
multifactor_required      : level of multifactor required for the destination
multifactor_configured    : level of multifactor set up by the user
login_cancel              : a cancel URL was specified
cancel_url                : the specified cancel URL

You may customize this file however you wish for your site.

The authors hereby relinquish any claim to any copyright that they may
have in this work, whether granted under contract or by operation of law
or international treaty, and hereby commit to the public, at large, that
they shall not, at any time in the future, seek to enforce any copyright
in this work against any person or entity, or prevent any person or
entity from copying, publishing, distributing or creating derivative
works of this work.
-->
  [% END %]

  <body>
    <h1 align="center">WebAuth Error</h1>
    <div class="loginbox" align="center">
      <table border="1" width="70%">
        <tr>
          <td><img alt="Error" src="/images/error.png"
                   width="160" height="160"/></td>
          <td>
            <div class="errortext">
              [% IF err_html %]
                [% err_html %]
              [% ELSE %]
              <p><strong>An error has occurred</strong></p>

              <!-- Error: browser submitted login page via GET -->
              [% IF err_bad_method %]
                <p>Error: Login form not properly submitted.</p>
                <p>Your browser has improperly submitted the login form
                   via GET instead of POST, which risks exposing your
                   password in your browser history and to other web sites
                   you visit.  Please check that your browser is not
                   misconfigured and you do not use browser plugins that
                   override proper form handling.</p>
              [% END %]

              <!-- Error: cookies disabled in web browser -->
              [% IF err_cookies_disabled %]
                <p>Error: You must enable cookies on your web browser.</p>
                <p>You have just tried to access a web service that is
                   protected by WebAuth.  However, WebAuth is unable to
                   tell this web service who you are because your browser
                   has cookies disabled.</p>
                <p>WebAuth depends on cookies to communicate with your web
                   service.  Please enable cookies in your web browser.<p>
              [% END %]

              <!-- Error: locked out due to excessive login failures -->
              [% IF err_lockout %]
                <p>Error: Too many login failures.</p>
                <p>There have been too many failed login attempts for this
                   account.  Please try again later.</p>
              [% END %]

              <!-- Error: no response token -->
              [% IF err_no_request_token %]
                <p>Error: The URL given is incomplete.</p>
              [% END %]

              <!-- Error: request was a replay -->
              [% IF err_replay %]
                <p>Error: Authentication was a replay.</p>
                <p>You cannot repeat your authentication to this site.  If
                   you reached this page via the back button in your
                   browser, start over by going directly to the web site
                   you want to visit.</p>
              [% END %]

              <!-- Error: missing data when redisplaying the confirm page -->
              [% IF err_confirm %]
                <p>Error: Necessary form data was missing.</p>
                <p>You have probably accessed a stale cached page by
                   mistake.</p>
              [% END %]

              <!-- Error: multifactor required, user has none set up -->
              [% IF err_no_mfactor %]
                <p>Error: Multifactor is required for the destination site
                   but you have none set up to use.</p>
              [% END %]

              <!-- Error: higher multifactor level required than user has -->
              [% IF err_insufficient_mfactor %]
                <p>Error: The destination site requires a higher level of
                   multifactor than you have set up.</p>
                <p>The site requires one of the following levels:<br />
                   [% FOREACH level IN multifactor_required %]
                     [% level FILTER html %]<br />
                   [% END %]
                </p>
                <p>Your level of multifactor is only:<br />
                   [% FOREACH level IN multifactor_configured %]
                     [% level FILTER html %]<br />
                   [% END %]
                </p>
                [% IF login_cancel %]
                  <p><a href="[% cancel_url FILTER html %]">Cancel</a>
                     logging on to this service</p>
                [% END %]
              [% END %]

              <!-- Error: higher LoA required than user has -->
              [% IF err_insufficient_loa %]
                <p>Error: The destination site requires a higher level of
                   assurance than you have set up.</p>
                [% IF login_cancel %]
                  <p><a href="[% cancel_url FILTER html %]">Cancel</a>
                     logging on to this service</p>
                [% END %]
              [% END %]

              <!-- Error: sendauth failed to run successfully -->
              [% IF err_sendauth %]
                <p>Error: Unable to send authentication code.</p>
                <p>There was an internal error while attempting to send you
                   an authentication code.</p>
              [% END %]

              [% IF err_webkdc %]
                <p>Error: [% err_msg FILTER html %]</p>
              [% END %]

              <p>To try again, please return to the preceding web page
              (or you may need to start your request for this web
              service again).  Click <a href="/help.html">help</a> for
              assistance</p>
              [% END %]
            </div>
          </td>
        </tr>
      </table>
    </div>
  </body>
</html>