|Reported by:||d_s_rogers||Owned by:||nobody|
Description (last modified by alec)
Hi, I'd really like kerberos login integration. There are several parts to this. The first is SASL support. There is a sasl plugin for php that will allow kerberos logins to the IMAP server. It can also cache kerberos credentials on the webserver (like mod_auth_kerb) so I can jump from one web app to another (on the same server) without relogging in. The second part is SPNEGO support. This would allow my local kerberos ticket to be used to securly authenticate to RoundCube e.g. I login to my kerberos domain (either at login, or just after login), and bring up RoundCube in my browser, and I am automagiclly logged in. SPNEGO is a HTTP auth method and is supported by mod_auth_kerb. Since RoundCube doesn't use HTTP auth, normally, I would suspect that the easist integation would be a login page that tries to do a SPNEGO http auth first, and if it succeeds, procceeds like a normal login. This is also related to bug #1388203 (which asks that you reuse HTTP auth) and bug #1327791 (which is a request for integrated authentication with other webapps). Thanks.
Change History (3)
comment:1 Changed 5 years ago by seansan
- Milestone set to 0.1.5
- Severity changed from critical to normal
comment:2 Changed 5 years ago by thomasb
- Milestone changed from 0.1.5 to later
- Owner changed from roundcube to nobody
- Status changed from assigned to new
Note: See TracTickets for help on using tickets.