[imp] IMP and Login without password?

[Derek Moore]

> is there a way to bypass the login with horde::imp and
> just authenticate?

As IMP depends on IMAP, and as IMAP requires a username and password to 
authenticate and access mailboxes, you'd have to hack up a solution specific 
for IMAP, I would think.

Maybe this is a possible solution:
Have a database of usernames and their corresponding plaintext passwords.  
Write your own Auth class (say, Auth_techsupport) that only requires a 
username.  This class would look up the plaintext password for that username 
and then it could pass everything over to Auth_imap as normal.

Of course, having a database with usernames and their plaintext passwords, and 
having a web page where you can login using only a username, raises some 
serious security considerations.  However, if it's engineered properly, 
there's no reason it shouldn't be safe.

Also, making sure the usernames-to-passwords database stays up to date is also 
another issue you'd need to take into consideration.

Okay, I'm done now,

Derek

[ derek p. moore ]-------------------[ http://hackunix.org/~derekm/pubkey.asc ]
[ derekm@hackunix.org ]----------------------------[ bfd2 fad6 1014 80c9 aaa8 ]
[ http://hackunix.org/~derekm/ ]-------------------[ a4a0 f449 3461 a443 51b9 ]