[dev] gollem authentification via Horde

[Brent J. Nordquist]

On Wed, 4 Jul 2001, Chuck Hagenbuch <chuck@horde.org> wrote:

> > (b) couldn't each application, when it needs to connect to an external
> > service (IMAP, FTP), try all the existing stored credentials first (thus
> > only requiring a login prompt if none of them work, and then storing that
> > one too)?
>
> No; that'd send username/password combos to services that didn't necessarily
> deserve them. But I'm nitpicking with that specific, really. If we had a
> reasonable way of determining which credential went with what, it should be
> fine.

I'm not 100% sure I understand what you're getting at there (so feel free
to clarify as necessary), but

(a) re: "send username/password combos to services that didn't necessarily
deserve them", I'm thinking that you make this new "try all credentials
Horde knows first" behavior configurable on a per-app basis.  This would
allow site administrators to prevent a specific set of Horde apps from
getting credentials they shouldn't, at the cost of breaking
single-sign-on.  But for the sites that do have a completely unified
back-end auth. system, the "try all" behavior is what they want, and
unintended disclosure isn't an issue for them.

(b) re: "a reasonable way of determining which credential went with what",
I was thinking that when a given app is first accessed (and has no
established credentials yet), it tries all the ones that Horde knows
first, and when it finds one that works, it caches that credential itself
and uses it thereafter (essentially making a copy).  So each app. would
track its own dedicated credential, as IMP does today; it's just that it
would draw on Horde's previous knowledge in seeding it, only asking the
user as the last resort.

-- 
Brent J. Nordquist <bjn@horde.org> N0BJN
Yahoo!: Brent_Nordquist / AIM: BrentJNordquist / ICQ: 76158942



>From janmailing@gmx.de Date: Thu,  5 Jul 2001 11:14:30 +0000
Return-Path: <janmailing@gmx.de>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 53585 invoked from network); 5 Jul 2001 11:16:53 -0000
Received: from mailout00.sul.t-online.com (HELO mailout00.sul.t-online.de) (194.25.134.16)
  by horde.org with SMTP; 5 Jul 2001 11:16:53 -0000
Received: from fwd06.sul.t-online.de 
	by mailout00.sul.t-online.de with smtp 
	id 15I77s-0001UP-06; Thu, 05 Jul 2001 13:16:52 +0200
Received: from linux.wg.de (320034214675-0001@[217.80.111.26]) by fmrl06.sul.t-online.com
	with esmtp id 15I77k-2IXepkC; Thu, 5 Jul 2001 13:16:44 +0200
Received: from localhost (localhost [127.0.0.1])
	by linux.wg.de (8.11.0/8.11.0/SuSE Linux 8.11.0-0.4) with ESMTP id f65BEUR13234
	for <dev@lists.horde.org>; Thu, 5 Jul 2001 13:14:30 +0200
Received: from 192.168.60.1 ( [192.168.60.1])
	as user jan@mail.wg.de by linux.wg.de with HTTP;
	Thu,  5 Jul 2001 11:14:30 +0000
Message-ID: <994331670.3b444c1664d2e@linux.wg.de>
Date: Thu,  5 Jul 2001 11:14:30 +0000
From: Jan Schneider <janmailing@gmx.de>
To: dev@lists.horde.org
References: <3B410031.F1BE4542@developer.ch> <20010702203024.B9096@csh.rit.edu> <994149070.3b4182ce7deef@linux.wg.de> <994175307.3b41e94b1803d@marina.horde.org>
In-Reply-To: <994175307.3b41e94b1803d@marina.horde.org>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
X-Sender: 320034214675-0001@t-dialin.net
Subject: Re: [imp] Re: [dev] notifications and recurring tasks for NAG

Moved to dev.

Zitat von Chuck Hagenbuch <chuck@horde.org>:

> Quoting Jan Schneider <janmailing@gmx.de>:
> 
> > This should be implemented horde wide. I already thought about it to notify
> 
> > kronolith alarms to the user.
> > A quick solution would be to implement a method in the imp api that let
> other 
> > horde apps store a message into the logged in user's mailbox.
> > Of course we further need a crontab script to handle this if the user is
> not 
> > logged in.
> 
> I don't think that's a good general solution, and storing messages directly
> to 
> mailboxes is kind of ugly. I think a general notification system that can
> send 
> emails, fax, etc., is a great idea, though.

A starting point would perhaps be a notification like it's already implemented 
in imp with the alert popups.
Of course notifications must popup regardless to which horde app you currently 
have open. I currently see three option to implement this:

1) Let all horde apps use a horde wide common-header.inc that contains the 
necessary javascript stuff.
2) Build a small floater window that refreshes itself and does the stuff.
3) Put the stuff into the horde menu and let this frame refresh itself.

I prefer the 2nd solution because not all users use the horde menu (3) and 
solution (1) works only if the user refreshes the page regularly or has a page 
open that refreshes itself.

Jan.


>From janmailing@gmx.de Date: Thu,  5 Jul 2001 12:46:08 +0000
Return-Path: <janmailing@gmx.de>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 62508 invoked from network); 5 Jul 2001 12:46:48 -0000
Received: from mailout01.sul.t-online.com (HELO mailout01.sul.t-online.de) (194.25.134.80)
  by horde.org with SMTP; 5 Jul 2001 12:46:48 -0000
Received: from fwd06.sul.t-online.de 
	by mailout01.sul.t-online.de with smtp 
	id 15I8Ws-0007Y1-0F; Thu, 05 Jul 2001 14:46:46 +0200
Received: from linux.wg.de (320034214675-0001@[217.80.111.26]) by fmrl06.sul.t-online.com
	with esmtp id 15I8Wq-0Pwe6iC; Thu, 5 Jul 2001 14:46:44 +0200
Received: from localhost (localhost [127.0.0.1])
	by linux.wg.de (8.11.0/8.11.0/SuSE Linux 8.11.0-0.4) with ESMTP id f65Ck8R13884
	for <dev@lists.horde.org>; Thu, 5 Jul 2001 14:46:09 +0200
Received: from 192.168.60.1 ( [192.168.60.1])
	as user jan@mail.wg.de by linux.wg.de with HTTP;
	Thu,  5 Jul 2001 12:46:08 +0000
Message-ID: <994337168.3b4461909cfa1@linux.wg.de>
Date: Thu,  5 Jul 2001 12:46:08 +0000
From: Jan Schneider <janmailing@gmx.de>
To: dev@lists.horde.org
References: <20010704182853.73353.qmail@horde.org>
In-Reply-To: <20010704182853.73353.qmail@horde.org>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
X-Sender: 320034214675-0001@t-dialin.net
Subject: Re: [cvs] commit: horde/locale/nl/LC_MESSAGES horde.mo horde/locale/zh_CN/LC_MESSAGES horde.mo horde/po Makefile shtool

We should also modify extract.pl because it currently parses all subdirectories 
including the apps.
The only current solution to circumvent this is to checkout a seperate copy of 
horde without the apps.

Jan.

Zitat von Chuck Hagenbuch <chuck@horde.org>:

> chuck       2001/07/04 11:28:53 PDT
> 
>   Added files:
>     locale/nl/LC_MESSAGES horde.mo 
>     locale/zh_CN/LC_MESSAGES horde.mo 
>     po                   Makefile shtool 
>   Log:
>   Add Horde locale Makefile and .mo files
> 
> 


::::::::::::::::::::::::::::::::::::::::
AMMMa AG - discover your knowledge
:::::::::::::::::::::::::::
Detmolder Str. 25-33 :: D-33604 Bielefeld
fon +49.521.96878-0 :: fax  +49.521.96878-20
http://www.ammma.de
::::::::::::::::::::::::::::::::::::::::::::::


>From max@the Date: Thu,  5 Jul 2001 08:11:00 -0700
Return-Path: <max@the-triumvirate.net>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 80414 invoked from network); 5 Jul 2001 15:12:09 -0000
Received: from cx439309-b.santab1.ca.home.com (HELO zion.the-triumvirate.net) (65.5.157.46)
  by horde.org with SMTP; 5 Jul 2001 15:12:09 -0000
Received: (from http@localhost)
	by zion.the-triumvirate.net (8.10.2/8.10.2) id f65FB1126846
	for dev@lists.horde.org; Thu, 5 Jul 2001 08:11:01 -0700
X-Authentication-Warning: zion.the-triumvirate.net: http set sender to max@the-triumvirate.net using -f
Received: from 65.5.157.45 ( [65.5.157.45])
	as user max@imap.the-triumvirate.net by www.the-triumvirate.net with HTTP;
	Thu,  5 Jul 2001 08:11:00 -0700
Message-ID: <994345860.3b448384aae73@www.the-triumvirate.net>
Date: Thu,  5 Jul 2001 08:11:00 -0700
From: Max Kalika <max@the-triumvirate.net>
To: dev@lists.horde.org
References: <20010704182853.73353.qmail@horde.org> <994337168.3b4461909cfa1@linux.wg.de>
In-Reply-To: <994337168.3b4461909cfa1@linux.wg.de>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
X-Originating-IP: 65.5.157.45
Subject: Re: [dev] Re: [cvs] commit: horde/locale/nl/LC_MESSAGES horde.mo horde/locale/zh_CN/LC_MESSAGES horde.mo horde/po Makefile shtool

Quoting Jan Schneider <janmailing@gmx.de>:

> We should also modify extract.pl because it currently parses all 
> subdirectories including the apps. The only current solution to circumvent 
> this is to checkout a seperate copy of horde without the apps.

It still does that?  I was pretty sure I fixed it.  I'll take a look when I get 
to work in a few minutes.

-- 
/// max kalika 
// max@the-triumvirate.net 

"and after a while you'll stop making computers out of stuff and start making 
stuff out of computers" -- douglas adams 4/5/01