[gentoo-user] Way OT - Question about Squirrelmail and authentication
This is probably the wrong list to ask this question on, but I'll ask it anyway. I wanted to create set of PHP pages to offer espersunited.com users with several different services accessible from their web browser. I'd like for them to be able to enter their username and password at a login screen and after be able to use all the services offered. The only problem is that I can't figure out what mechanism Squirrelmail uses for authentication. I've looked at the PHP source code file for the login screen and I can't make sense of it. I want to either alter the code for the login screen in Squirrelmail so that it will use the session cookie I set (I think that was what it was called - the cookie that lasts until a user closes her browser window and then goes away) or to analyze the mechanism Squirrelmail uses and when I understand it to use if for my login gateway. I'm still at the novice level with PHP, but I should be able to understand this if I could only FIND it... -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Sullivan wrote: only problem is that I can't figure out what mechanism Squirrelmail uses for authentication. I've looked at the PHP source code file for the Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate against the IMAP server. - -- Arturo Buanzo Busleiman - www.buanzo.com.ar Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man! KTP Consultores - info AT ktpconsultores.com.ar Romper un sistema de seguridad los acerca tanto a ser hackers como el encender autos puenteando los convierte en ingenieros automotrices. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDji4uAlpOsGhXcE0RAn+vAJ9nNK80+GzG/IF8fGPrLp7NyUMAKwCdHj82 HpWcZmEEV1mz1snancwP304= =OPVs -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Sullivan wrote: only problem is that I can't figure out what mechanism Squirrelmail uses for authentication. I've looked at the PHP source code file for the Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate against the IMAP server. - -- Arturo Buanzo Busleiman - www.buanzo.com.ar Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man! KTP Consultores - info AT ktpconsultores.com.ar Romper un sistema de seguridad los acerca tanto a ser hackers como el encender autos puenteando los convierte en ingenieros automotrices. I know it takes a username and password, but HOW does it compare that username and password against the user database? -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Sullivan wrote: On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote: Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate against the IMAP server. I know it takes a username and password, but HOW does it compare that username and password against the user database? I told you: Squirrelmail uses the IMAP protocol to connect to a configured IMAP server. Thus, the IMAP server compares against some user database. And I say some because the backend will depend on the IMAP server implementation... - -- Arturo Buanzo Busleiman - www.buanzo.com.ar Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man! KTP Consultores - info AT ktpconsultores.com.ar Romper un sistema de seguridad los acerca tanto a ser hackers como el encender autos puenteando los convierte en ingenieros automotrices. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDjjSNAlpOsGhXcE0RAlNlAJ4lzOyCuQyaZZ+qq92Cz0B2ixpBYgCfSPJT WHYqc3IsmjpvWxLVoas3Aq4= =VuDo -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
On Wed, 2005-11-30 at 20:23 -0300, Arturo 'Buanzo' Busleiman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Sullivan wrote: On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote: Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate against the IMAP server. I know it takes a username and password, but HOW does it compare that username and password against the user database? I told you: Squirrelmail uses the IMAP protocol to connect to a configured IMAP server. Thus, the IMAP server compares against some user database. And I say some because the backend will depend on the IMAP server implementation... - -- Arturo Buanzo Busleiman - www.buanzo.com.ar Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man! KTP Consultores - info AT ktpconsultores.com.ar Romper un sistema de seguridad los acerca tanto a ser hackers como el encender autos puenteando los convierte en ingenieros automotrices. What I mean is that I need the name of some function that I can look for in the code that compares the username/password against the system set. BTW, my IMAP server is dovecot-0.99.14 -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Sullivan wrote: What I mean is that I need the name of some function that I can look for in the code that compares the username/password against the system set. BTW, my IMAP server is dovecot-0.99.14 go to www.php.net and check out the imap functions. - -- Arturo Buanzo Busleiman - www.buanzo.com.ar Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man! KTP Consultores - info AT ktpconsultores.com.ar Romper un sistema de seguridad los acerca tanto a ser hackers como el encender autos puenteando los convierte en ingenieros automotrices. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDjkF5AlpOsGhXcE0RAoVgAJwKOqAr7T19Jm0yU22Xxi7z6s2+/QCfcv6l ejK2inz+70to7HA/6QXT4P8= =JU8p -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
