[horde] horde auth suceeds, imp auth fails, user thinks he's not logged in

amy.rich@tufts.edu amy.rich at tufts.edu
Wed Oct 26 15:37:30 PDT 2005


> We're using hordeauth to log our uses into imp.  If the IMAP server is down
> for some reason, the login to horde (via LDAP) succeeds, but the login to
> IMAP fails.  Unfortunately, the screen that appears is misleading because
> it says "Login failed."  and presents the user with the
> Username/Password/language options.  This is dangerous for us since users
> may not realize that they have not been logged out of horde.  If a second
> user inputs his/her information at this subsequent login screen the result
> is person A's attributes with person B's mail.
> Is there any way to _force_ a horde logout if the imp login fails?

chuck> Why don't you just use IMP application auth?

A number of the attributes we need are stored in LDAP, not in IMAP.  Also, the
theoretical plan for the future is to tie webmail into some sort of single
signon portal.



More information about the horde mailing list