Re: SMTP SASL authentication plugin?

Paul Lesniewski <[email protected]> wrote:

> You're looking at initStream() in class/deliver/Deliver_SMTP.class.php right?

Yes, with a patch like this:
http://ftp.espci.fr/shadow/manu/smtp_auth_hook.patch
 
> Which mechanism are you seeking to add?  Depending on the mechanism,
> we may be interested in adding it to the core code, but adding a hook
> there could be a fine way to do this.  Yes, we'd certainly be
> interested in entertaining your contribution!

I am not sure it worth being included in the sources, since it is not
defined by any standard.

The SASL mechanism defined here is SAML, implemented by crudesaml:
http://ftp.espci.fr/pub/crudesaml/crudesaml-1.1.targz

The idea is to use a signed SAML assertion as a security ticket.
Provided we use SSL for connexions, it is only known by the IdP, the SP
and the client browser. It is signed, has an expiration date and a
specified recipient. 

I already implemented that for IMAP in squirrelmail, using the PAM
module component of crudesaml, this gives me web SSO to the webmail. Now
I would like to propagate the user identity to the SMTP server when
sending mail, using the SASL plugin. The goal is to enforce per-user
sending mail rate limits to avoid chaos when an user account is
compromised.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
[email protected]

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel