[imp] Shibboleth/SSO integration

[Cassio Nishiguchi]

I can also add a preferences page to Horde, just like the "Remote Servers" 
option, where a user can save his IMAP username and password.  This is not 
the most elegant solution but it works.  The only thing that I'm having 
trouble with is that the password is kept in the session, so when I save the 
preferences I also have to change the session variable.  Otherwise the user 
has to log out and back in for the changes to take effect.  How would I go 
about changing a session variable when the IMAP preferences are changed?

Thanks in advance,
Cassio

On Tue April 11 2006 10:58, Michael M Slusarz wrote:
> Quoting Cassio Nishiguchi <cassio at protectnetwork.org>:
> > Hi,
> > I am working on developing an authentication module to integrate Horde
> > with Shibboleth (http://shibboleth.internet2.edu), which should work
> > basically like a single-sign-on system - by the time the user gets to
> > Horde, he is already logged in.  Shibboleth can set the username on an
> > HTTP header like REMOTE_USER, so I wrote a little Auth_shib class that
> > supports transparent authentication and gets the username from the
> > header.  However, my problem is having this work with IMP.  It seems that
> > IMP requires a password to authenticate the user, which Shibboleth
> > doesn't provide.  Is there any good way to get around that requirement? 
> > Has anyone else deployed Horde/IMP behind an SSO system?  If so, how did
> > you get the IMP login to work?
>
> It sounds like the hang-up is not going to be Horde/IMP, but rather
> your IMAP server.  IMP can authenticate through Horde for access to
> IMP application itself, but IMP can't obtain any mail information from
> the IMAP server without first authenticating to that server.
>
> michael
>
> ___________________________________
> Michael Slusarz [slusarz at horde.org]