[dev] gollem authentification via Horde

Atif Ghaffar aghaffar@developer.ch
Thu, 05 Jul 2001 19:11:41 +0200


"Brent J. Nordquist" wrote:

> I'm not 100% sure I understand what you're getting at there (so feel fr=
ee
> to clarify as necessary), but
> =

> (a) re: "send username/password combos to services that didn't necessar=
ily
> deserve them", I'm thinking that you make this new "try all credentials=

> Horde knows first" behavior configurable on a per-app basis.  This woul=
d
> allow site administrators to prevent a specific set of Horde apps from
> getting credentials they shouldn't, at the cost of breaking
> single-sign-on.  But for the sites that do have a completely unified
> back-end auth. system, the "try all" behavior is what they want, and
> unintended disclosure isn't an issue for them.

Brent, this seems quiet reasonable.

How about something along the lines of

$this->applications['turba'] = array(
    'fileroot' => dirname(__FILE__) . '/../turba',
    'webroot' => '/horde/turba',
    'icon' => '/horde/turba/graphics/group.gif',
    'name' => 'Addressbook',
    'allow_guests' => false,
    'show' => true,
    'auth/login' = 'imp',
    'auth/logout' = 'imp'
);

Each app can define which credentials to use.



> (b) re: "a reasonable way of determining which credential went with wha=
t",
> I was thinking that when a given app is first accessed (and has no
> established credentials yet), it tries all the ones that Horde knows
> first, and when it finds one that works, it caches that credential itse=
lf
> and uses it thereafter (essentially making a copy).  =

How do we handle password change behaviour then?
If user changes his pass is he logged out of horde sub app?




-- 
Atif Ghaffar
Internet Development Manager
4unet AG/SA/Ltd.
---------------------------.
          +41 21 351 53 60 ¦ voice
          +41 79 659 89 72 ¦ mobile
          +41 21 254 53 62 ¦ fax
      http://www.4unet.net ¦ www
http://www.atifghaffar.com ¦ homepage
    atif.ghaffar@4unet.net ¦ email


>From max@the Date: Thu,  5 Jul 2001 10:29:10 -0700
Return-Path: <max@the-triumvirate.net>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 97752 invoked from network); 5 Jul 2001 17:30:20 -0000
Received: from cx439309-b.santab1.ca.home.com (HELO zion.the-triumvirate.net) (65.5.157.46)
  by horde.org with SMTP; 5 Jul 2001 17:30:20 -0000
Received: (from http@localhost)
	by zion.the-triumvirate.net (8.10.2/8.10.2) id f65HTBE27213
	for dev@lists.horde.org; Thu, 5 Jul 2001 10:29:11 -0700
X-Authentication-Warning: zion.the-triumvirate.net: http set sender to max@the-triumvirate.net using -f
Received: from 128.111.222.23 ( [128.111.222.23])
	as user max@imap.the-triumvirate.net by www.the-triumvirate.net with HTTP;
	Thu,  5 Jul 2001 10:29:10 -0700
Message-ID: <994354150.3b44a3e6a8763@www.the-triumvirate.net>
Date: Thu,  5 Jul 2001 10:29:10 -0700
From: Max Kalika <max@the-triumvirate.net>
To: dev@lists.horde.org
References: <20010704182853.73353.qmail@horde.org> <994337168.3b4461909cfa1@linux.wg.de>
In-Reply-To: <994337168.3b4461909cfa1@linux.wg.de>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
X-Originating-IP: 128.111.222.23
Subject: Re: [dev] Re: [cvs] commit: horde/locale/nl/LC_MESSAGES horde.mo horde/locale/zh_CN/LC_MESSAGES horde.mo horde/po Makefile shtool

Quoting Jan Schneider <janmailing@gmx.de>:

> We should also modify extract.pl because it currently parses all 
> subdirectories including the apps. The only current solution to circumvent 
> this is to checkout a seperate copy of horde without the apps.

Ok, this should be fixed (again).  Somehow extract.pl got stomped on (probably 
by me).  Anyway, this revision is a bit better since it will ignore custom apps 
as well.  Give it a try.

-- 
/// max kalika 
// max@the-triumvirate.net 

"and after a while you'll stop making computers out of stuff and start making 
stuff out of computers" -- douglas adams 4/5/01


>From janmailing@gmx.de Date: Thu,  5 Jul 2001 18:02:24 +0000
Return-Path: <janmailing@gmx.de>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 799 invoked from network); 5 Jul 2001 18:07:04 -0000
Received: from mailout03.sul.t-online.com (HELO mailout03.sul.t-online.de) (194.25.134.81)
  by horde.org with SMTP; 5 Jul 2001 18:07:04 -0000
Received: from fwd03.sul.t-online.de 
	by mailout03.sul.t-online.de with smtp 
	id 15IDWp-0003hq-04; Thu, 05 Jul 2001 20:07:03 +0200
Received: from linux.wg.de (320034214675-0001@[217.0.157.17]) by fmrl03.sul.t-online.com
	with esmtp id 15IDWd-0D2AjpC; Thu, 5 Jul 2001 20:06:51 +0200
Received: from localhost (localhost [127.0.0.1])
	by linux.wg.de (8.11.0/8.11.0/SuSE Linux 8.11.0-0.4) with ESMTP id f65I2OR17231
	for <dev@lists.horde.org>; Thu, 5 Jul 2001 20:02:24 +0200
Received: from 192.168.60.1 ( [192.168.60.1])
	as user jan@mail.wg.de by linux.wg.de with HTTP;
	Thu,  5 Jul 2001 18:02:24 +0000
Message-ID: <994356144.3b44abb07ca89@linux.wg.de>
Date: Thu,  5 Jul 2001 18:02:24 +0000
From: Jan Schneider <janmailing@gmx.de>
To: dev@lists.horde.org
References: <20010704182853.73353.qmail@horde.org> <994337168.3b4461909cfa1@linux.wg.de> <994354150.3b44a3e6a8763@www.the-triumvirate.net>
In-Reply-To: <994354150.3b44a3e6a8763@www.the-triumvirate.net>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
X-Sender: 320034214675-0001@t-dialin.net
Subject: Re: [dev] Re: [cvs] commit: horde/locale/nl/LC_MESSAGES horde.mo horde/locale/zh_CN/LC_MESSAGES horde.mo horde/po Makefile shtool

It spits out the following message:
Can't use an undefined value as a symbol reference at extract.pl line 37.

Jan.

Zitat von Max Kalika <max@the-triumvirate.net>:

> Quoting Jan Schneider <janmailing@gmx.de>:
> 
> > We should also modify extract.pl because it currently parses all 
> > subdirectories including the apps. The only current solution to circumvent
> 
> > this is to checkout a seperate copy of horde without the apps.
> 
> Ok, this should be fixed (again).  Somehow extract.pl got stomped on
> (probably 
> by me).  Anyway, this revision is a bit better since it will ignore custom
> apps 
> as well.  Give it a try.
> 
> -- 
> /// max kalika 
> // max@the-triumvirate.net 
> 
> "and after a while you'll stop making computers out of stuff and start making
> 
> stuff out of computers" -- douglas adams 4/5/01
> 
> -- 
> Horde Developers mailing list: http://horde.org/
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: dev-unsubscribe@lists.horde.org
> 
> 


::::::::::::::::::::::::::::::::::::::::
AMMMa AG - discover your knowledge
:::::::::::::::::::::::::::
Detmolder Str. 25-33 :: D-33604 Bielefeld
fon +49.521.96878-0 :: fax  +49.521.96878-20
http://www.ammma.de
::::::::::::::::::::::::::::::::::::::::::::::


>From chuck@horde.org Date: Thu,  5 Jul 2001 14:43:52 -0400
Return-Path: <chuck@horde.org>
Mailing-List: contact dev-help@lists.horde.org; run by ezmlm
Delivered-To: mailing list dev@lists.horde.org
Received: (qmail 5893 invoked from network); 5 Jul 2001 18:45:36 -0000
Received: from 208-59-250-206.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com (HELO marina.horde.org) (208.59.250.206)
  by horde.org with SMTP; 5 Jul 2001 18:45:36 -0000
Received: by marina.horde.org (Postfix, from userid 33)
	id B72C739F4; Thu,  5 Jul 2001 14:43:52 -0400 (EDT)
Received: from 206.243.191.252 ( [206.243.191.252])
	as user chuck@localhost by marina.horde.org with HTTP;
	Thu,  5 Jul 2001 14:43:52 -0400
Message-ID: <994358632.3b44b5689a355@marina.horde.org>
Date: Thu,  5 Jul 2001 14:43:52 -0400
From: Chuck Hagenbuch <chuck@horde.org>
To: dev@lists.horde.org
References: <3B410031.F1BE4542@developer.ch> <20010702203024.B9096@csh.rit.edu> <994149070.3b4182ce7deef@linux.wg.de> <994175307.3b41e94b1803d@marina.horde.org> <994331670.3b444c1664d2e@linux.wg.de>
In-Reply-To: <994331670.3b444c1664d2e@linux.wg.de>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 2.3.7-cvs
Subject: Re: [dev] Re: [imp] Re: [dev] notifications and recurring tasks for NAG

Quoting Jan Schneider <janmailing@gmx.de>:

> A starting point would perhaps be a notification like it's already
> implemented in imp with the alert popups.
> Of course notifications must popup regardless to which horde app youcurrently 
> have open. I currently see three option to implement this:
> 
> 1) Let all horde apps use a horde wide common-header.inc that contains the 
> necessary javascript stuff.
> 2) Build a small floater window that refreshes itself and does the stuff.
> 3) Put the stuff into the horde menu and let this frame refresh itself.
> 
> I prefer the 2nd solution because not all users use the horde menu (3) and 
> solution (1) works only if the user refreshes the page regularly or has a 
> page open that refreshes itself.

People are going to miss out on some features if they're not using the full 
framework (ie, Horde menu); I feel comfortable saying that this is one of them. 
I'd _much_ rather have the menubar refresh than have a popup window.

-chuck

--
Charles Hagenbuch, <chuck@horde.org>
Some fallen angels have their good reasons.