webmail+kerberos+cyrus imapd

[Stuart Morrison]

I use an implementation of Horde + Imp to provide webmail services.  I 
do not use Kerberos myself although I believe it is an option with Horde 
+ Imp.  Horde's homepage is http://www.horde.org (I feel as though this 
is getting a bit off topic!)

If you go for Horde to get started you will need to use the CVS HEAD 
releases of Horde, framework and Imp (CVS Horde then cd into that dir 
and CVS framework and Imp)  You can always add other packages when you 
have the basics up and running.  There are very good docs in the docs 
folders.  For krb5 there is extra info in horde/framework/Auth/Auth/krb5.php

Nikola Milutinovic wrote:

>--- Jeffrey T Eaton <jeaton at cmu.edu> wrote:
>
>  
>
>>>My curus-imapd authenticates using gssapi kerberos5.
>>>Is there a webmail system that authenticates users to the cyrus-imapd
>>>using kerberos5?
>>>Maybe through pubcookie?
>>>I cannot find any directions..
>>>      
>>>
>>At CMU, we are using a slightly modiffied version of SquirrelMail
>>which uses pubcookie with kerberos ticket passing for authentication.
>>On the webmail server, instead of letting PHP make the connection to
>>Cyrus, we instead fork a copy of imtest (which authenticates using the
>>passed tickets).  Then SquirrelMail sends its IMAP commands over
>>the connection opened by imtest.
>>    
>>
>
>Has anyone considered a full Kerberos approach? Oops! Can it be done?
>
>I mean, a web browser authenticating via SPNEGO/GSSAPI and that ticket being
>used for IMAP. I have a feeling that it cannot be done since the client tickets
>are not compatible. Different services. One is HTTP/server.domain.com at REALM and
>the other is IMAP/server.domain.com at REALM. That is not transferable, right?
>
>Nix.
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com 
>----
>Cyrus Home Page: http://asg.web.cmu.edu/cyrus
>Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
>List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>  
>