Author Topic: Kerberos Authentication - is it possible?  (Read 5302 times)

Offline paulwipe

  • Newbie
  • *
  • Posts: 1
Kerberos Authentication - is it possible?
« on: April 09, 2018, 04:40:15 PM »
roundcube community,

I'm assuming that Kerberos authentication IS possible since there is a plugin called "krb_authentication". What I can't figure out is how do I use the plugin? I took the contents of the config.inc.php.dist from the plugin folder and put it in my config.inc.php, but I still can't login using Kerberos...

Can I still use this plugin? The description for the krb_authentication plugin in the installer says "N/A". Does that mean that the plugin has been abandoned?

FWIW I successfully set up dovecot to use Kerberos for IMAP and tested with mutt. That doesn't seem to give me any issues.

Offline alec

  • Hero Member
  • *****
  • Posts: 1,363
Re: Kerberos Authentication - is it possible?
« Reply #1 on: April 10, 2018, 03:03:15 AM »
You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.

Offline koxman

  • Newbie
  • *
  • Posts: 1
Re: Kerberos Authentication - is it possible?
« Reply #2 on: June 14, 2021, 11:31:25 AM »
Anybody got this working?

I have working GSSAPI under Nxinx but when trying to run the roundcube website I get  "ERR_INVALID_RESPONSE".


nginx.conf:

load_module /usr/lib/nginx/modules/ngx_http_auth_spnego_module.so;


00-default-ssl.conf:

location / {
    auth_gss on;
    auth_gss_realm TEST.COM;
    auth_gss_service_name HTTP/email.test.com;
    auth_gss_keytab /etc/krb5.keytab;
}



roundcube plugin   config.inc.php

$config['krb_authentication_host'] = '';
$config['krb_authentication_context'] = [
       'imap'  => 'imap/email.test.com@TEST.COM',
       'smtp'  => 'smtp/email.test.com@TEST.COM',
   ];



Please can you share working config?




Offline nymphick

  • Newbie
  • *
  • Posts: 3
Re: Kerberos Authentication - is it possible?
« Reply #3 on: February 27, 2024, 03:37:56 AM »
I faced the same problem. Can't get the Roundcube to use the connection via GSSAPI

Offline nymphick

  • Newbie
  • *
  • Posts: 3
Re: Kerberos Authentication - is it possible?
« Reply #4 on: March 01, 2024, 10:46:08 AM »
You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.
Can you tell me how to make this work?