Re: Bug # 33500 | imap auth fails when server advertises gssapi

On Thu, 22 Mar 2007 12:02:50 +0500 "Back Ports" <backports@gmail.com> wrote: > Hi all, > > Is there any progress on the following bug report: > > http://bugs.php.net/bug.php?id=33500&thanks=6 > > It was reported quite a while ago -- I also saw a relevant post on the > mit kerberos mailing list where discussed patches fixed the issue, > however, they appear impossible to track down. > > > http://mailman.mit.edu/pipermail/kerberos/2006-April/009629.html I'm not a php dev and I don't know the status of this bug but I have a possible solution for you anyway. If you're on an Active Directory network (very possible if your IMAP server is offering GSSAPI) then you could use our product to get the necessary credential so that the IMAP extension's GSSAPI auth works. With our Plexcel PHP extension (see sig) you can acquire Kerberos credentials in three ways - 1 Single Sign-On (the delegated credential from the web client); 2 use the HTTP service account cred; or 3 explicit logon with username and password. So you could use any one of those three credentials (with the putenv_krb5ccname option) to get a Kerberos cred and then IMAP's GSSAPI auth should work. Mike -- Michael B Allen PHP Active Directory Kerberos SSO http://www.ioplex.com/