Login Authentication Plugin - SquirrelMail

Donations
News
About
Support
Security
Screen shots
Download
Plugins
Documentation
Sponsors
Bounties

search site:

Junk Email Filter

Security Notice
Phishing campain
Version 1.4.15
Security Upgrade

Plugins - Login Authentication
Category: Logging in

This plugin tells SquirrelMail how to understand when users have been externally authenticated, in which case the SquirrelMail login page is unnecessary. Common uses of this plugin are for environments that employ HTTP authentication or have implemented single sign-on systems. Remember that SquirrelMail still needs to authenticate against your IMAP server, so SquirrelMail still needs to know what credentials to use and how to get them. Assuming you've coordinated your IMAP authentication with your external web authentication, this plugin helps with those tasks.

Version 3.0
by Paul Lesniewski on May 30, 2012
Please support this plugin's development: Donate to this author
[ login_auth-3.0-1.4.0.tar.gz tarball (14439 d/l) Help ]
Requires: SquirrelMail 1.4.0+, Compatibility 2.0.7+ (unless using SM 1.4.10+ or 1.5.2+), PHP Zlib support (only if you are using the compression feature with the "authenticated_saml" module)
Description:

Added the ability to use this plugin for other external login systems (aside from just HTTP authentication), such as some single sign-on systems.
Thanks to Emmanuel Dreyfus for help with the "authenticated_saml" module and Victoriano Giralt for help with the "trusted_saml" module
Added compatibility with the Login Manager plugin
Added configuration file that allows administrators to fine-tune the behavior of this plugin, particularly if using a custom single sign-on system. Those using HTTP authentication do not need to create a configuration file of their own - the default behavior will suffice in these cases.

Older versions

Version 2.1
by Paul Lesniewski on Jun 23, 2008
[ login_auth-2.1-1.4.0.tar.gz tarball (16078 d/l) Help ]
Requires: SquirrelMail 1.4.0+, Compatibility 2.0.7+ (unless using SM 1.4.10+ or 1.5.2+)
Description:

Log out of IMAP connection made during login page hook
Update plugin documentation and some minor code updates to bring into conformance with newest plugin specifications
Added custom signout page that reflects the true nature of disposing HTTP authentication credentials

Version 2.0
by Paul Lesniewski on Oct 6, 2004
[ login_auth-2.0-1.4.0.tar.gz tarball (15450 d/l) Help ]
Requires: SquirrelMail 1.4.0
Description:

Rewrote the whole plugin so that it works as a normal plugin (as opposed to a bit of a hack)
If username/password pairs don't match, SquirrelMail's login page is correctly shown again
Conformance with SquirrelMail plugin requirements and other cleanup

Version 1.1
by Tyler Akins on May 2, 2001
[ login_auth.1.1-1.0.0.tar.gz tarball (15209 d/l)login_auth.1.1-1.0.0.zip zip (10893 d/l) Help ]
Requires: SquirrelMail 0.5 or above
Description: Removed a security issue -- the user's password was being stored in the web server's logs.

Version 1.0
by Tyler Akins on May 1, 2001
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 0.5 or above
Description: Initial version.

If you have problems with the download or decompressing...

Internet Explorer: Right-click on the file, then select "Save Target As"
Firefox, Mozilla, Netscape: Right-click on the file, then select "Save Link As"
Opera: Right-click on the file, then select "Save Link Document As"
Lynx and Links: Press "d" on the link to download the file directly.

Untarring problems: Your browser might have un-gzipped it for you automatically. Try just "tar xvf" instead of "tar xvfz". Also, the plugins archive isn't gzipped (it is a tarball of .tar.gz files)
Macintosh users: Just hold down your mouse button to get the menu instead of right-clicking.
If all else fails, seek our help