[horde] Limting Horde Administrator login?

[David Powell (Moondrake)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Patrick Baldwin wrote:

>> Or simply read docs/INSTALL and choose a proper authentication method.
> 
> OK, I installed horde in /usr/local/www/horde- but there doesn't
> seem to be a docs directory there.  Is the method Kevin suggested
> (thanks!) a problem for some reason, or were you just suggesting an
> alternative with an RTFM as a bonus?

Hmm weird that you don't have the docs - are you sure your permissions
on the folders are right?  If so, I'd re-download horde just to get the
docs.

Anyway, It sounds like you left the horde setup as the default, which
starts with the auth backed as "auto authenticate as a certain user"
(the default being Administrator) - hence your users all logging in with
admin privileges.  It wouldn't really help I don't think to auto log in
as a different (non privileged) user, because then you'd immediately
lose the ability to configure horde from the web interface.

Here's what the INSTALLATION doc says about authentication... (or the
start of it anyway):

"[After you've done the basic install steps] you can now access Horde
without a password, and you will be logged in as an administrator. You
should first configure a real authentication backend.  Click on
'`Setup`` in the ``Administration`` menu and configure Horde.  Start in
the ``Authentication`` tab."

It then goes onto give the example of setting authentication against a
remote IMAP - which may or may not suit you.

I don't know what you're setup is, but two of the easiest options for a
better authentication (i.e. where you aren't auto logged in as admin)
are sql or http backends.  If you choose sql (as I did), its likely that
horde comes with the necessary scripts to set up your tables.

While you're changing the authentication backend, click on the sign-up
tab and make sure you change the setting to allow non-registered users
to sign up (unless you want to do it manually in the sql backend or
whatever else you choose).

HTH,

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mandriva - http://enigmail.mozdev.org

iD8DBQFE0cgGjoTw6jzaQWURAgcxAJ9GLaDiRsKpCvb6l2cEjLC+dvX4GgCfYuGl
af5QdSvlVUGY1eZSWd4m8GE=
=xrHD
-----END PGP SIGNATURE-----