Re: SMTP SASL authentication plugin?

On Sat, Apr 2, 2011 at 2:26 AM, Emmanuel Dreyfus <[email protected]> wrote:
> Paul Lesniewski <[email protected]> wrote:
>
>> You're looking at initStream() in class/deliver/Deliver_SMTP.class.php right?
>
> Yes, with a patch like this:
> http://ftp.espci.fr/shadow/manu/smtp_auth_hook.patch

This looks well done to me.

>> Which mechanism are you seeking to add?  Depending on the mechanism,
>> we may be interested in adding it to the core code, but adding a hook
>> there could be a fine way to do this.  Yes, we'd certainly be
>> interested in entertaining your contribution!
>
> I am not sure it worth being included in the sources, since it is not
> defined by any standard.
>
> The SASL mechanism defined here is SAML, implemented by crudesaml:
> http://ftp.espci.fr/pub/crudesaml/crudesaml-1.1.targz
>
> The idea is to use a signed SAML assertion as a security ticket.
> Provided we use SSL for connexions, it is only known by the IdP, the SP
> and the client browser. It is signed, has an expiration date and a
> specified recipient.
>
> I already implemented that for IMAP in squirrelmail, using the PAM
> module component of crudesaml, this gives me web SSO to the webmail. Now
> I would like to propagate the user identity to the SMTP server when
> sending mail, using the SASL plugin.

Note that this has also come up for the SquirrelMail IMAP Proxy server
(imapproxy).  You can read about it here:

http://lists.andrew.cmu.edu/pipermail/imapproxy-info/2010-July/thread.html#889

The features discussed in that thread are available in current
snapshots of its code on our downloads page.

It makes sense to follow up with a SMTP solution such as you are proposing.

> The goal is to enforce per-user
> sending mail rate limits to avoid chaos when an user account is
> compromised.

Note that there is a plugin for SquirrelMail that does this too.  See:

http://squirrelmail.org/plugin_view.php?id=213

I will be accepting your patch and adding it to our code in the next
day or so (after which, it will be available in snapshot downloads on
our website), and look forward to seeing your plugin.

Thanks,

  Paul

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel