* [gentoo-user] Way OT - Question about Squirrelmail and authentication
@ 2005-11-30 22:54 Michael Sullivan
2005-11-30 22:56 ` Arturo 'Buanzo' Busleiman
0 siblings, 1 reply; 6+ messages in thread
From: Michael Sullivan @ 2005-11-30 22:54 UTC (permalink / raw
To: gentoo-user
This is probably the wrong list to ask this question on, but I'll ask it
anyway. I wanted to create set of PHP pages to offer espersunited.com
users with several different services accessible from their web browser.
I'd like for them to be able to enter their username and password at a
login screen and after be able to use all the services offered. The
only problem is that I can't figure out what mechanism Squirrelmail uses
for authentication. I've looked at the PHP source code file for the
login screen and I can't make sense of it. I want to either alter the
code for the login screen in Squirrelmail so that it will use the
session cookie I set (I think that was what it was called - the cookie
that lasts until a user closes her browser window and then goes away) or
to analyze the mechanism Squirrelmail uses and when I understand it to
use if for my login gateway. I'm still at the novice level with PHP,
but I should be able to understand this if I could only FIND it...
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
2005-11-30 22:54 [gentoo-user] Way OT - Question about Squirrelmail and authentication Michael Sullivan
@ 2005-11-30 22:56 ` Arturo 'Buanzo' Busleiman
2005-11-30 23:16 ` Michael Sullivan
0 siblings, 1 reply; 6+ messages in thread
From: Arturo 'Buanzo' Busleiman @ 2005-11-30 22:56 UTC (permalink / raw
To: gentoo-user
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Michael Sullivan wrote:
> only problem is that I can't figure out what mechanism Squirrelmail uses
> for authentication. I've looked at the PHP source code file for the
Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate
against the IMAP server.
- --
Arturo "Buanzo" Busleiman - www.buanzo.com.ar
Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man!
KTP Consultores - info AT ktpconsultores.com.ar
Romper un sistema de seguridad los acerca tanto a ser hackers como el
encender autos puenteando los convierte en ingenieros automotrices.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFDji4uAlpOsGhXcE0RAn+vAJ9nNK80+GzG/IF8fGPrLp7NyUMAKwCdHj82
HpWcZmEEV1mz1snancwP304=
=OPVs
-----END PGP SIGNATURE-----
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
2005-11-30 22:56 ` Arturo 'Buanzo' Busleiman
@ 2005-11-30 23:16 ` Michael Sullivan
2005-11-30 23:23 ` Arturo 'Buanzo' Busleiman
0 siblings, 1 reply; 6+ messages in thread
From: Michael Sullivan @ 2005-11-30 23:16 UTC (permalink / raw
To: gentoo-user
On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Michael Sullivan wrote:
> > only problem is that I can't figure out what mechanism Squirrelmail uses
> > for authentication. I've looked at the PHP source code file for the
>
> Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate
> against the IMAP server.
>
> - --
> Arturo "Buanzo" Busleiman - www.buanzo.com.ar
> Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man!
> KTP Consultores - info AT ktpconsultores.com.ar
>
> Romper un sistema de seguridad los acerca tanto a ser hackers como el
> encender autos puenteando los convierte en ingenieros automotrices.
I know it takes a username and password, but HOW does it compare that
username and password against the user database?
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
2005-11-30 23:16 ` Michael Sullivan
@ 2005-11-30 23:23 ` Arturo 'Buanzo' Busleiman
2005-11-30 23:30 ` Michael Sullivan
0 siblings, 1 reply; 6+ messages in thread
From: Arturo 'Buanzo' Busleiman @ 2005-11-30 23:23 UTC (permalink / raw
To: gentoo-user
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Michael Sullivan wrote:
> On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote:
>>Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate
>>against the IMAP server.
> I know it takes a username and password, but HOW does it compare that
> username and password against the user database?
I told you: Squirrelmail uses the IMAP protocol to connect to a configured IMAP server. Thus, the
IMAP server compares against some user database. And I say "some" because the backend will depend on
the IMAP server implementation...
- --
Arturo "Buanzo" Busleiman - www.buanzo.com.ar
Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man!
KTP Consultores - info AT ktpconsultores.com.ar
Romper un sistema de seguridad los acerca tanto a ser hackers como el
encender autos puenteando los convierte en ingenieros automotrices.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFDjjSNAlpOsGhXcE0RAlNlAJ4lzOyCuQyaZZ+qq92Cz0B2ixpBYgCfSPJT
WHYqc3IsmjpvWxLVoas3Aq4=
=VuDo
-----END PGP SIGNATURE-----
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
2005-11-30 23:23 ` Arturo 'Buanzo' Busleiman
@ 2005-11-30 23:30 ` Michael Sullivan
2005-12-01 0:19 ` Arturo 'Buanzo' Busleiman
0 siblings, 1 reply; 6+ messages in thread
From: Michael Sullivan @ 2005-11-30 23:30 UTC (permalink / raw
To: gentoo-user
On Wed, 2005-11-30 at 20:23 -0300, Arturo 'Buanzo' Busleiman wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Michael Sullivan wrote:
> > On Wed, 2005-11-30 at 19:56 -0300, Arturo 'Buanzo' Busleiman wrote:
>
> >>Squirrelmail is an IMAP client. So, it takes the username and password and uses that to validate
> >>against the IMAP server.
>
> > I know it takes a username and password, but HOW does it compare that
> > username and password against the user database?
>
> I told you: Squirrelmail uses the IMAP protocol to connect to a configured IMAP server. Thus, the
> IMAP server compares against some user database. And I say "some" because the backend will depend on
> the IMAP server implementation...
>
> - --
> Arturo "Buanzo" Busleiman - www.buanzo.com.ar
> Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man!
> KTP Consultores - info AT ktpconsultores.com.ar
>
> Romper un sistema de seguridad los acerca tanto a ser hackers como el
> encender autos puenteando los convierte en ingenieros automotrices.
What I mean is that I need the name of some function that I can look for
in the code that compares the username/password against the system set.
BTW, my IMAP server is dovecot-0.99.14
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] Way OT - Question about Squirrelmail and authentication
2005-11-30 23:30 ` Michael Sullivan
@ 2005-12-01 0:19 ` Arturo 'Buanzo' Busleiman
0 siblings, 0 replies; 6+ messages in thread
From: Arturo 'Buanzo' Busleiman @ 2005-12-01 0:19 UTC (permalink / raw
To: gentoo-user
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Michael Sullivan wrote:
> What I mean is that I need the name of some function that I can look for
> in the code that compares the username/password against the system set.
> BTW, my IMAP server is dovecot-0.99.14
go to www.php.net and check out the imap functions.....
- --
Arturo "Buanzo" Busleiman - www.buanzo.com.ar
Consultor en Seguridad Informatica / Dominio Digital TV - Da FOSS man!
KTP Consultores - info AT ktpconsultores.com.ar
Romper un sistema de seguridad los acerca tanto a ser hackers como el
encender autos puenteando los convierte en ingenieros automotrices.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFDjkF5AlpOsGhXcE0RAoVgAJwKOqAr7T19Jm0yU22Xxi7z6s2+/QCfcv6l
ejK2inz+70to7HA/6QXT4P8=
=JU8p
-----END PGP SIGNATURE-----
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2005-12-01 0:28 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-11-30 22:54 [gentoo-user] Way OT - Question about Squirrelmail and authentication Michael Sullivan
2005-11-30 22:56 ` Arturo 'Buanzo' Busleiman
2005-11-30 23:16 ` Michael Sullivan
2005-11-30 23:23 ` Arturo 'Buanzo' Busleiman
2005-11-30 23:30 ` Michael Sullivan
2005-12-01 0:19 ` Arturo 'Buanzo' Busleiman
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox