[imp] Shibboleth/SSO integration

[Cassio Nishiguchi]

Is anyone familiar with how IMAP Preauth works?  Could that be a way to get 
around this issue? 

On Tue April 11 2006 10:58, Michael M Slusarz wrote:
> Quoting Cassio Nishiguchi <cassio at protectnetwork.org>:
> > Hi,
> > I am working on developing an authentication module to integrate Horde
> > with Shibboleth (http://shibboleth.internet2.edu), which should work
> > basically like a single-sign-on system - by the time the user gets to
> > Horde, he is already logged in.  Shibboleth can set the username on an
> > HTTP header like REMOTE_USER, so I wrote a little Auth_shib class that
> > supports transparent authentication and gets the username from the
> > header.  However, my problem is having this work with IMP.  It seems that
> > IMP requires a password to authenticate the user, which Shibboleth
> > doesn't provide.  Is there any good way to get around that requirement? 
> > Has anyone else deployed Horde/IMP behind an SSO system?  If so, how did
> > you get the IMP login to work?
>
> It sounds like the hang-up is not going to be Horde/IMP, but rather
> your IMAP server.  IMP can authenticate through Horde for access to
> IMP application itself, but IMP can't obtain any mail information from
> the IMAP server without first authenticating to that server.
>
> michael
>
> ___________________________________
> Michael Slusarz [slusarz at horde.org]