Matt Forsyth said: > Hi, I am attempting to integrate squirrelmail as a component of a > pre-existing Single-Sign-On system. > If possible, I would like to have the main login service (a java web > server living on the same host as squirrelmail) simply set the exact > cookies that squirrelmail uses to identify who using the system. Then > I could simply link directly to a squirrelmail page & squirrelmail would > look at the relevant cookies & assume that the person had already logged > in. > > Do you think this would work? > & What are the exact cookies I would need to set? >
What you have in mind will not work because you also need to share the session between php and java. We store an encryption key which is generated randomly on login in the cookie and with that key we can decrypt the encrypted password stored in the session. The authentication is done by authenticating against the imap server. The only possible way to share the the login is by using the same authentication backend for your imap server as for the rest of your webservices. Then you have to initiate a php session and retrieve the sid and store it in the sqm cookie, generate the random key and encrypt the password and add it to the php session, set the var is_logged_in to true, again in he php session. and finally store the language and random key in the cookie. For further info regarding the cookie, use mozilla or firefox to see the cookie info. Regards, Marc Groot Koerkamp. ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id)95 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
