On Wed, Feb 28, 2007, Marc Dirix <[EMAIL PROTECTED]> said:

>> I let handle Shibboleth all the auth stuff, a user accessing the  
>> webmail page is authenticated and authoirized to read the mail for  
>> the user Shibboleth is telling the webmail app. From now on only  
>> the username is available. The dbmail-imap server gets the request  
>> for user joe and should deliver the mails, without password.
>>
> 
> Why not propagate the users password to the imap server, and use it  
> for authenticating? It should not be that hard
> to keep Shibboleth and dbmail's authentication table in sync.

We currently only provide PLAIN authentication for IMAP. Providing SASL
will probably be part of bringing TLS into DBMail; the libraries for these
tend to run together a little bit, making it easier to add both features
at once.

If Shibboleth can be accessed through a SASL library, great. If we have to
write code for something completely different than SASL, it might not
happen. There's a lot already on the todo list for the next major DBMail
release.

Aaron
_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to