Opened 7 years ago

Closed 2 months ago

#1413432 closed Feature Requests (wontfix)

Kerberos/SPNEGO

Reported by: d_s_rogers Owned by: nobody
Priority: 5 Milestone: later
Component: Core functionality Version: None
Severity: normal Keywords:
Cc:

Description (last modified by alec) 

Hi,

I'd really like kerberos login integration.  There are
several parts to this.  The first is SASL support. 
There is a sasl plugin for php that will allow kerberos
logins to the IMAP server.  It can also cache kerberos
credentials on the webserver (like mod_auth_kerb) so I
can jump from one web app to another (on the same
server) without relogging in.

The second part is SPNEGO support.  This would allow my
local kerberos ticket to be used to securly
authenticate to RoundCube e.g. I login to my kerberos
domain (either at login, or just after login), and
bring up RoundCube in my browser, and I am automagiclly
logged in.  SPNEGO is a HTTP auth method and is
supported by mod_auth_kerb.  Since RoundCube doesn't
use HTTP auth, normally, I would suspect that the
easist integation would be a login page that tries to
do a SPNEGO http auth first, and if it succeeds,
procceeds like a normal login.

This is also related to bug #1388203 (which asks that
you reuse HTTP auth) and bug #1327791 (which is a
request for integrated authentication with other webapps).

Thanks.

Change History (3)

comment:1 Changed 5 years ago by seansan

  • Milestone set to 0.1.5
  • Severity changed from critical to normal

Related to #1388203 and #1327791

More types of login, review in 0.1.5

comment:2 Changed 5 years ago by thomasb

  • Milestone changed from 0.1.5 to later
  • Owner changed from roundcube to nobody
  • Status changed from assigned to new

comment:3 Changed 2 months ago by alec

  • Description modified (diff)
  • Resolution changed from None to wontfix
  • Status changed from new to closed

I suppose it can be done with a plugin now. Closing, as old and small interest in it.

Note: See TracTickets for help on using tickets.