[SOLVED] Log into Zimbra directly passing variables ?

[claude]

Hello,

What a nice day today!

I'm putting Zimbra into a web appli made of tabbs containing lots of other applications. The aim is to allow a user to enter only one log and pw in order to enter the main appli and no more pw and log will be asked to him.

All the other pws/logs of all the appli intagrated inside the main appli will be found elsewhere from a DB.

1- The problem is to find a way to call Zimbra with known creadentials in order to connect to it transparently for the user of the main appli.

2- The same question occurs when connecting to a calendar via a url like:

http://zimbra.companyname.com
/home/userownername@zimbra.companyname.com/
MyAppliCalendar.htm

Could it be possible to put arguments inside the url when calling the appli
like -> http://.......myurl?log=mylog|pw=mypw

Thank you for any help.
Its quite a hot issue
Claude

[uxbod]

Preauth - Zimbra :: Wiki

[claude]

Thank you,

I've just tested the "Preauth" as suggested by you. It works fine but coul it be possible to not suppress the use of the pw to log?

I mean, by the shared key and the mail address it is possible now to open any Zimbra mail account without knowing their pw.

Do you know how I could add the Zimbra mail account's pw into the Zimbra's connection process in addition to the shared key ?

Thank you.
Claude

[uxbod]

Why ? unless you know the shared key then why would it be a issue ? Obviously you should *never* expose that key!!!

[claude]

...I perfectly agree. This is exchanging a secret (pw) for another (sec key).

The fact is I wonder if there could be authentification tools more 'standardized' as for ex openid....or other working with Zimbra ?

The idea is to abstract as much as possible the process of loggin for all the app embedded into the portail...as for example 'Highrise' accepting openid....

Thank you.
Claude

[uxbod]

Only things like AD or another LDAP server. If you have everything setup in a external LDAP and all your other portals apps will authenticate to it you can use pre-auth fine. I take your point though and so do others so please vote for Bug 17147 - OpenID

[claude]

We have an LDAP available :-) . So this will probably be the solution for the moment.

Many thanx for your nice help.
Claude