[imp] virtual hosts - single horde installation

[imp at efilter.newt.ca]

This is the exact issue that I am currently facing.  Right now I am using
IMAP for authentication.  But, since I'm trying to get a single horde access
point for all of my virtual hosts (as I only want to use one ssl
certificate), anyone who is on a virtual host can currently log in (since
they are actually all being authorized through the same imap server).
However, I need to restrict this so that I can control which accounts they
are allowed to attempt to log in with, as I don't want anyone who has access
to the imap server to log in, only a select group of virtual hosts.

I could easily do this with .htaccess, or various other methods.  But I
would prefer to use the single login, as I know that can work.  Would it be
worth while to put a hook into the login code to check their username
against a list of virtual domains, or is there a smoother way of doing this?

I would rather not replicate a list of passwords into a second location
(i.e. an sql database, etc), merely just a confirmation against a white list
of users (not just by username, but by domain) to allow a login to proceed.

Thanks,

Jeremy


>
> Well, I'm able to get mass virtualhosts working fine.  My issue is that
I'd
> like a SINGLE secure login point
> (https://secure.mydomain.com/horde/imp/redirect.php).  I've almost got it
> working too, except for some weird bug which is only "half" loggin me in
> sometimes, and not working at all other times.  I want the login to be
over
> SSL, but a) don't want to pay for a cert for each domain (I currently roll
> my own certs, but would rather not have a dialog pop-up for each
subdomain)
> and b) don't want everything running over SSL anyways as it takes up more
> resources on the server to encrypt EVERYTHING.
> 
>   Issac
> 
> PS - IMP people: it would be a cool thing for there to be an option for a
> secure login only, even for just a single domain...
> 
> ----- Original Message ----- 
> From: "Jason Lohrenz" <jmlohren at glmmn.com>
> To: "'Issac Goldstand'" <margol at beamartyr.net>; <imp at
lists.horde.org>
> Sent: Tuesday, December 23, 2003 1:54 AM
> Subject: RE: [imp] virtual hosts - single horde installation
> 
> 
> > How many domain names are you talking about??
> > What I have done for our company since we have multiple domains is
> purchased
> > a web hosting control panel.  I got PLESK 6.0 (This is not a promotion
for
> > their software).  It has the currently stable released version of
> Horde/IMP
> > integrated with it, and all domains get access to it via
> > webmail.domainname.com
> > E-mail me off list if you want more info on their software as posting to
> the
> > list I don't think is appropriate.
> >
> > (p.s. I'm working on getting the HEAD versions working with it and also
> > getting a driver for the vacation/forward modules to work with it as
well)
> >
> > Jason Lohrenz
> > IT Manager
> > Pacific Medicaid Services
> >
> >
> > -----Original Message-----
> > From: imp-bounces at lists.horde.org [mailto:imp-bounces at
lists.horde.org] On
> > Behalf Of Issac Goldstand
> > Sent: Monday, December 22, 2003 4:13 PM
> > To: imp at lists.horde.org
> > Subject: Re: [imp] virtual hosts - single horde installation
> >
> > Is there any suggested way to couple this with SSL ( a single SSL login
> > point for multiple virtual domains)?  I've been tinkering with the login
> > scripts for a bit already, buut having problems...
> >
> >   Issac
> >
> > ----- Original Message ----- 
> > From: "Jean-Marc LIGER" <jean-marc.liger at siris.sorbonne.fr>
> > To: <imp at lists.horde.org>
> > Sent: Monday, December 22, 2003 11:45 AM
> > Subject: Re: [imp] virtual hosts - single horde installation
> >
> >
> > > >two domains one computer - ip based domains
> > > >
> > > >If I have the document roots...
> > > >
> > > >/var/www/html/adv #domain 1
> > > >/var/www/html/pr  #domain 2
> > > >/var/www/html/horde #base horde root
> > > >
> > > >and then
> > > >ln -s /var/www/html/horde /var/www/html/adv
> > > >ln -s /var/www/html/horde /var/www/html/pr
> > > >
> > > >is this a reasonable solution for both domains to run from single
horde
> > > >installation?
> > > >
> > > >Is there a better way?
> > >
> > > You can use the directives ServerAlias for the VirtualHost name or
> > > Alias for the Directory name in your httpd.conf configuration file
> > > (see apache documentation).
> > >
> > > JML
> > >
> > > >Craig
> > >
> > >
> > > -- 
> > > IMP mailing list
> > > Frequently Asked Questions: http://horde.org/faq/
> > > To unsubscribe, mail: imp-unsubscribe at lists.horde.org
> > >
> >
> >
> > -- 
> > IMP mailing list
> > Frequently Asked Questions: http://horde.org/faq/
> > To unsubscribe, mail: imp-unsubscribe at lists.horde.org