SquirrelMail  
Donations
News
About
Support
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties













Security Notice
Phishing campain
Version 1.4.15
Security Upgrade
Plugins - Login Authentication
Category: Logging in

This plugin tells SquirrelMail how to understand when users have been externally authenticated, in which case the SquirrelMail login page is unnecessary. Common uses of this plugin are for environments that employ HTTP authentication or have implemented single sign-on systems. Remember that SquirrelMail still needs to authenticate against your IMAP server, so SquirrelMail still needs to know what credentials to use and how to get them. Assuming you've coordinated your IMAP authentication with your external web authentication, this plugin helps with those tasks.


Version 3.0
by Paul Lesniewski on May 30, 2012
Please support this plugin's development: Donate to this author
[ login_auth-3.0-1.4.0.tar.gz tarball (4802 d/l) Help ]
Requires: SquirrelMail 1.4.0+, Compatibility 2.0.7+ (unless using SM 1.4.10+ or 1.5.2+), PHP Zlib support (only if you are using the compression feature with the "authenticated_saml" module)

Description:
  • Added the ability to use this plugin for other external login systems (aside from just HTTP authentication), such as some single sign-on systems.
  • Thanks to Emmanuel Dreyfus for help with the "authenticated_saml" module and Victoriano Giralt for help with the "trusted_saml" module
  • Added compatibility with the Login Manager plugin
  • Added configuration file that allows administrators to fine-tune the behavior of this plugin, particularly if using a custom single sign-on system. Those using HTTP authentication do not need to create a configuration file of their own - the default behavior will suffice in these cases.

Older versions

Version 2.1
by Paul Lesniewski on Jun 23, 2008
[ login_auth-2.1-1.4.0.tar.gz tarball (7290 d/l) Help ]
Requires: SquirrelMail 1.4.0+, Compatibility 2.0.7+ (unless using SM 1.4.10+ or 1.5.2+)

Description:
  • Log out of IMAP connection made during login page hook
  • Update plugin documentation and some minor code updates to bring into conformance with newest plugin specifications
  • Added custom signout page that reflects the true nature of disposing HTTP authentication credentials


Version 2.0
by Paul Lesniewski on Oct 6, 2004
[ login_auth-2.0-1.4.0.tar.gz tarball (8726 d/l) Help ]
Requires: SquirrelMail 1.4.0

Description:
  • Rewrote the whole plugin so that it works as a normal plugin (as opposed to a bit of a hack)
  • If username/password pairs don't match, SquirrelMail's login page is correctly shown again
  • Conformance with SquirrelMail plugin requirements and other cleanup


Version 1.1
by Tyler Akins on May 2, 2001
[ login_auth.1.1-1.0.0.tar.gz tarball (8766 d/l)login_auth.1.1-1.0.0.zip zip (4415 d/l) Help ]
Requires: SquirrelMail 0.5 or above

Description: Removed a security issue -- the user's password was being stored in the web server's logs.

Version 1.0
by Tyler Akins on May 1, 2001
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above

Description: Initial version.

If you have problems with the download or decompressing...
Internet Explorer
Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape
Right-click on the file, then select "Save Link As"
Opera
Right-click on the file, then select "Save Link Document As"
Lynx and Links
Press "d" on the link to download the file directly.
  • Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
  • Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
  • If all else fails, seek our help
© 1999-2010 by The SquirrelMail Project Team