sjm at sjmorrison.net
Thu Apr 13 19:46:23 EDT 2006
I use an implementation of Horde + Imp to provide webmail services. I
do not use Kerberos myself although I believe it is an option with Horde
+ Imp. Horde's homepage is http://www.horde.org (I feel as though this
is getting a bit off topic!)
If you go for Horde to get started you will need to use the CVS HEAD
releases of Horde, framework and Imp (CVS Horde then cd into that dir
and CVS framework and Imp) You can always add other packages when you
have the basics up and running. There are very good docs in the docs
folders. For krb5 there is extra info in horde/framework/Auth/Auth/krb5.php
Nikola Milutinovic wrote:
>--- Jeffrey T Eaton <jeaton at cmu.edu> wrote:
>>>My curus-imapd authenticates using gssapi kerberos5.
>>>Is there a webmail system that authenticates users to the cyrus-imapd
>>>Maybe through pubcookie?
>>>I cannot find any directions..
>>At CMU, we are using a slightly modiffied version of SquirrelMail
>>which uses pubcookie with kerberos ticket passing for authentication.
>>On the webmail server, instead of letting PHP make the connection to
>>Cyrus, we instead fork a copy of imtest (which authenticates using the
>>passed tickets). Then SquirrelMail sends its IMAP commands over
>>the connection opened by imtest.
>Has anyone considered a full Kerberos approach? Oops! Can it be done?
>I mean, a web browser authenticating via SPNEGO/GSSAPI and that ticket being
>used for IMAP. I have a feeling that it cannot be done since the client tickets
>are not compatible. Different services. One is HTTP/server.domain.com at REALM and
>the other is IMAP/server.domain.com at REALM. That is not transferable, right?
>Do You Yahoo!?
>Tired of spam? Yahoo! Mail has the best spam protection around
>Cyrus Home Page: http://asg.web.cmu.edu/cyrus
>Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
>List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
More information about the Info-cyrus