Release Support > Pending Issues
Kerberos Authentication - is it possible?
(1/1)
paulwipe:
roundcube community,
I'm assuming that Kerberos authentication IS possible since there is a plugin called "krb_authentication". What I can't figure out is how do I use the plugin? I took the contents of the config.inc.php.dist from the plugin folder and put it in my config.inc.php, but I still can't login using Kerberos...
Can I still use this plugin? The description for the krb_authentication plugin in the installer says "N/A". Does that mean that the plugin has been abandoned?
FWIW I successfully set up dovecot to use Kerberos for IMAP and tested with mutt. That doesn't seem to give me any issues.
alec:
You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.
koxman:
Anybody got this working?
I have working GSSAPI under Nxinx but when trying to run the roundcube website I get "ERR_INVALID_RESPONSE".
nginx.conf:
load_module /usr/lib/nginx/modules/ngx_http_auth_spnego_module.so;
00-default-ssl.conf:
location / {
auth_gss on;
auth_gss_realm TEST.COM;
auth_gss_service_name HTTP/email.test.com;
auth_gss_keytab /etc/krb5.keytab;
}
roundcube plugin config.inc.php
$config['krb_authentication_host'] = '';
$config['krb_authentication_context'] = [
'imap' => 'imap/email.test.com@TEST.COM',
'smtp' => 'smtp/email.test.com@TEST.COM',
];
Please can you share working config?
nymphick:
I faced the same problem. Can't get the Roundcube to use the connection via GSSAPI
nymphick:
--- Quote from: alec on April 10, 2018, 03:03:15 AM ---You have to configure your http server to use kerberos authentication, then the plugin will read ENV variables set by the server.
--- End quote ---
Can you tell me how to make this work?
Navigation
[0] Message Index
Go to full version