auto_login is looking like a good road to start down.  A tad more secure
than putting the username and password in the src of an iframe ;)
Thanks.

-Matt Forsyth
Seawave LLC

-----Original Message-----
From: Jonathan Angliss [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, May 05, 2004 4:02 PM
To: Marc Groot Koerkamp
Cc: [EMAIL PROTECTED]
Subject: Re: [SM-USERS] Need specifics about the cookies set by
squirrelmail

Hello Marc,
On Tuesday, May 04, 2004, Marc Groot Koerkamp wrote...

>> Hi, I am attempting to integrate squirrelmail as a component of a
>> pre-existing Single-Sign-On system.

>> If possible, I would like to have the main login service (a java
>> web server living on the same host as squirrelmail) simply set the
>> exact cookies that squirrelmail uses to identify who using the
>> system. Then I could simply link directly to a squirrelmail page &
>> squirrelmail would look at the relevant cookies & assume that the
>> person had already logged in.

>> Do you think this would work? & What are the exact cookies I would
>> need to set?

> What you have in mind will not work because you also need to share
> the session between php and java.

You could make it work. I don't think it'd be too difficult, but would
certainly require a little work. You'd have to write a small php
script that starts a session, generates the encryption key, does an
imap login, on success set the cookies, on failure don't... that way
they get the login screen on SM if they attempt to check their mail.

Now the other (easier) way to do it is to get the login_auto plugin
(or is it auto_login?), read up on that, and set the cookies that
plugin uses to login to SM. You then don't have to worry about
java->php compliance :)

-- 
Jonathan Angliss
([EMAIL PROTECTED])



-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:
http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info:
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to