Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:28559 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 36499 invoked by uid 1010); 22 Mar 2007 19:35:42 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 36484 invoked from network); 22 Mar 2007 19:35:42 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 22 Mar 2007 19:35:42 -0000 Authentication-Results: pb1.pair.com header.from=mba2000@ioplex.com; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=mba2000@ioplex.com; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain ioplex.com from 66.220.1.142 cause and error) X-PHP-List-Original-Sender: mba2000@ioplex.com X-Host-Fingerprint: 66.220.1.142 www.ioplex.com Linux 2.4/2.6 Received: from [66.220.1.142] ([66.220.1.142:1938] helo=www.ioplex.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id FF/A6-23198-88AD2064 for ; Thu, 22 Mar 2007 14:35:40 -0500 Received: from quark.foo.net (c-69-142-196-170.hsd1.nj.comcast.net [69.142.196.170]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by www.ioplex.com (Postfix) with ESMTP id 783AE42B6F; Thu, 22 Mar 2007 15:35:32 -0400 (EDT) Date: Thu, 22 Mar 2007 15:35:30 -0400 To: "Back Ports" Cc: internals@lists.php.net Message-ID: <20070322153530.01de5971.mba2000@ioplex.com> In-Reply-To: <3e1c67bc0703220002x12faf6c6oa6f5796603f31561@mail.gmail.com> References: <3e1c67bc0703220002x12faf6c6oa6f5796603f31561@mail.gmail.com> X-Mailer: Sylpheed version 1.0.6 (GTK+ 1.2.10; i386-redhat-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Bug # 33500 | imap auth fails when server advertises gssapi From: mba2000@ioplex.com (Michael B Allen) On Thu, 22 Mar 2007 12:02:50 +0500 "Back Ports" wrote: > Hi all, > > Is there any progress on the following bug report: > > http://bugs.php.net/bug.php?id=33500&thanks=6 > > It was reported quite a while ago -- I also saw a relevant post on the > mit kerberos mailing list where discussed patches fixed the issue, > however, they appear impossible to track down. > > http://mailman.mit.edu/pipermail/kerberos/2006-April/009629.html I'm not a php dev and I don't know the status of this bug but I have a possible solution for you anyway. If you're on an Active Directory network (very possible if your IMAP server is offering GSSAPI) then you could use our product to get the necessary credential so that the IMAP extension's GSSAPI auth works. With our Plexcel PHP extension (see sig) you can acquire Kerberos credentials in three ways - 1 Single Sign-On (the delegated credential from the web client); 2 use the HTTP service account cred; or 3 explicit logon with username and password. So you could use any one of those three credentials (with the putenv_krb5ccname option) to get a Kerberos cred and then IMAP's GSSAPI auth should work. Mike -- Michael B Allen PHP Active Directory Kerberos SSO http://www.ioplex.com/