Wanted to report back on this: I got to the point where - with some modifications in oath-toolkit - I was able to login using a concatenated password + OTP pair. However squirrelmail seems to initiate reauthentication quite frequently upon reloading page, entering in-and-out of mail directories, refreshing directory list, etc. Since the OTP part of the credentials expire, it fails soon and makes the whole effort/concept not feasible. Is there a good way to reduce the rate of reauthentication triggers and keep the a current session for a prolonged time? php.ini: session.cookie_lifetime = 0 session.gc_maxlifetime = 1440 (24 minutes) While if I'm actively browsing my mails I see reauths sometimes multiple times in a minute.
Any ideas appreciated! Thx: Dw. -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057 2026.Április 3.(P) 23:06 időpontban "Tóth Attila" ezt írta: > I'm using current squirrelmail snapshot, the imap server is dovecot 2.4.3. > I've installed oath-toolkit and totp works for ssh sessions. It would be > good to also enable it for dovecot. It would be easy to add the line to > the dovecot pam file. In case of sshd, it asks for the TOTP and the > password separately. I'm not sure how it would be feasible with > dovecot+squirrelmail. > Anyone ever successfully deployed oath_pam with dovecot+squirrelmail? > Any suggestions or prior experience? > > Thanks: > Dw. > -- > dr Tóth Attila, Radiológus, 06-20-825-8057 > Attila Toth MD, Radiologist, +36-20-825-8057 > > > > ----- > squirrelmail-users mailing list > Posting guidelines: http://squirrelmail.org/postingguidelines > List address: [email protected] > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > List info (subscribe/unsubscribe/change options): > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
