Release Support > Pending Issues

Kerberos Authentication - is it possible?

(1/1)

paulwipe:
roundcube community,

I'm assuming that Kerberos authentication IS possible since there is a plugin called "krb_authentication". What I can't figure out is how do I use the plugin? I took the contents of the config.inc.php.dist from the plugin folder and put it in my config.inc.php, but I still can't login using Kerberos...

Can I still use this plugin? The description for the krb_authentication plugin in the installer says "N/A". Does that mean that the plugin has been abandoned?

FWIW I successfully set up dovecot to use Kerberos for IMAP and tested with mutt. That doesn't seem to give me any issues.

alec:
You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.

koxman:
Anybody got this working?

I have working GSSAPI under Nxinx but when trying to run the roundcube website I get  "ERR_INVALID_RESPONSE".


nginx.conf:

load_module /usr/lib/nginx/modules/ngx_http_auth_spnego_module.so;


00-default-ssl.conf:

location / {
    auth_gss on;
    auth_gss_realm TEST.COM;
    auth_gss_service_name HTTP/email.test.com;
    auth_gss_keytab /etc/krb5.keytab;
}



roundcube plugin   config.inc.php

$config['krb_authentication_host'] = '';
$config['krb_authentication_context'] = [
       'imap'  => 'imap/email.test.com@TEST.COM',
       'smtp'  => 'smtp/email.test.com@TEST.COM',
   ];



Please can you share working config?

nymphick:
I faced the same problem. Can't get the Roundcube to use the connection via GSSAPI

nymphick:

--- Quote from: alec on April 10, 2018, 03:03:15 AM ---You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.

--- End quote ---
Can you tell me how to make this work?

Navigation

[0] Message Index