[imp] Single Sign On + Kerberos

Harakiri harakiri_23 at yahoo.com
Wed Jul 4 12:59:17 UTC 2007


Hello,

i know that Horde has Kerberos Auth support. However
does this also apply for Single Sign On ?

What i want to achieve is, that users of IMP can
access their webmail without entering a
username/password.

IE and Firefox have Kerberos Auth - so lets say my
users are in a Windows Domain - they authenticate only
once when logging into Windows. 

Now when they open their IE and goto the IMP webmail
they should not need to login again.

As far as i know Kerberos Auth only issues tickets and
then the Windows Server for example authenticates this
ticket - however how can/should IMP know the username
of the user to access the courier backend where the
messages for the web user are stored ?

One way would be to use mod_auth_kerb for apache,
however the problem remains how IMP/Any application
can figure out at least the Username - and sometimes
the password (probably impossible)


       
____________________________________________________________________________________
Sick sense of humor? Visit Yahoo! TV's 
Comedy with an Edge to see what's on, when. 
http://tv.yahoo.com/collections/222


More information about the imp mailing list