[dev] IMP: double login patch

[Florian Clever]

Hi,

attached is a patch to implement "hordeauth" for IMP.
I am not sure if this is the right way to go. I have been chewing on this
for the last couple of days and can not come up with a better solution. So I
guess this patch is just a proposal. I would appreciate every feedback.

Problem:
If the username/password combination is the same in for horde and IMP, which
it probably is in most organizations, you only want to login once. Currently
you just have IMP handle the authentication.
The drawback with that is, that then all the nice things like Permission
management "go away".

This Patch workaround:
If $conf['auth']['imp'] = 'hordeauth' in imp/config/conf.php and in
imp/config/servers.php one entry in $servers has 'hordeauth' = true,
imp/redirect.php will automatically create the IMP session.

Open Issues:
- Once logged into Horde it says "Login to Mail" until you click on it (even
though once you do that it automatically logs you in).
- $conf['auth']['imp'] could use a better name.

Let me know what you guys think.

PS: I hope there is not a way to do this already. That would be really
embarassing.

Florian Clever

Clever Software Solutions
http://www.clever-soft.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: imp.auth.patch
Type: application/octet-stream
Size: 5314 bytes
Desc: not available
Url : http://lists.horde.org/archives/dev/attachments/20021210/9e9e934c/imp.auth.obj