login via php

[joshuamorgan]

hey there,

i am currently still developing very slowly the Zimbra4PHP class. At the moment registration works great, and just needs error checking. The problem at the moment however is transparent login, that is logging into zimbra via my php application and then being transferred to zimbra without having to login again. i have issued all the correct SOAP requests, and get the authtoken. i then set cookies for *.domain.com as the domain name and do a http 'Location' header to http://wherezimbraisinstalled.com. however when i am transferred the cookie disappears, and i am not logged in. can anybody offer any help?

if you require more details/source code, please ask.

thanks,

josh

[KevinH]

What is you set the cookie for "/" and domain.com ie so * or *.

[joshuamorgan]

header("Set-Cookie: ls_last_user=joshua@nawmaw.com; ZM_AUTH_TOKEN={$token}; path=/zimbra; domain=.shobay.com");

header("Location: http://shobay.com/zimbra/mail");

i'm pretty sure i intially tried setting path=/.

thanks.

[KevinH]

Try this:

header("Set-Cookie: ls_last_user=joshua@nawmaw.com; ZM_AUTH_TOKEN={$token}; path=/; domain=shobay.com");
header("Location: http://shobay.com/zimbra/mail");

Use / and no . in the domain.

[Vanildo]

Hi,

I am have interest in your phpclass. Could You give me more informations? Do You plan to open source it? Can I contribute with something? Can I have access to your class?

Thanks,

Vanildo.

[joshuamorgan]

yes, the class will be completely open-source and documented. i will notify via the forum on completion of the class. the first version will only have login/create account support, but as i get time over the school holidays i will add to it.

if you want to recieve notification of when i finish the class email:

joshua DOT morgan+zimbra4php AT gmail DOT com

[smies]

what is the purpose of the class that you are making?

[joshuamorgan]

provides access to zimbra's soap calls via a php class. i.e: create accounts/login, etc. using php.

[joshuamorgan]

ok. it appears that you can't set a cookie for another domain from one domain.

for example:

setting a cookie for domain y from domain x. i will have to rethink this. is there any way to put the ZM_AUTH_TOKEN into the query string, instead of sending it as a cookie?

[KevinH]

It must be in a cookie. You should be able to set a cookie for foo.com from a.foo.com and see it on b.foo.com Is that not working for you?