On Sat, Apr 30, 2011 at 2:14 AM, Martin (Lists) <li...@fahrendorf.de> wrote: >> You might want to try looking at this bug entry >> http://www.sogo.nu/bugs/view.php?id=1113 as it tells how to do it >> for SOGo. > > OK, I got it working (at least partial). Apache currently requires a > login screen with my firefox. I didn't dig deeper as I need the mail > part as well.
To get SPNEGO working you have to set a couple of preferences in Firefox. See https://developer.mozilla.org/en/Integrated_Authentication for details. And, yes, without the mail part, it isn't really that useful unless you just need a calendar and address book. >> Unfortunately, the mail portion doesn't yet support true >> SSO Kerberos (http://www.sogo.nu/bugs/view.php?id=1200), but only >> CAS and WebAuth. > > So kerberos is not a solution currently. Are there any plans to add > kerberos based SSO for the mail part as well? I need to be able to > either use kerberos (where it is available) or a username/password > pair to login. Considering there has been no response to my bug report, I'd say not in the immediate future. If I remember correctly, the current CAS and WebAuth support was sponsored by a university. While those offer great browser-SSO support, neither is a complete desktop solution that you could integrate with say an Active Directory login. At some point that might be really useful when the OpenChange MAPI stuff is production ready. Steve -- users@sogo.nu https://inverse.ca/sogo/lists
