Added hook for managesieve_connect to set up GSSAPI authentication

roundcube · Feb 26, 2018 · 7abcc5a · 7abcc5a
1 parent 0b12721
commit 7abcc5a
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/plugins/krb_authentication/krb_authentication.php b/plugins/krb_authentication/krb_authentication.php
@@ -24,6 +24,7 @@ function init()
         $this->add_hook('authenticate', array($this, 'authenticate'));
         $this->add_hook('login_after', array($this, 'login'));
         $this->add_hook('storage_connect', array($this, 'storage_connect'));
+	$this->add_hook('managesieve_connect', array($this, 'managesieve_connect'));
     }
 
     /**
@@ -106,4 +107,20 @@ function login($args)
 
         return $args;
     }
+
+
+    /**
+     * managesieve_connect hook handler
+     */
+    function managesieve_connect($args)
+    {
+	if ((!isset($args['auth_type']) || $args['auth_type'] == 'GSSAPI') && !empty($_SERVER['REMOTE_USER']) && !empty($_SERVER['KRB5CCNAME'])) {
+            $rcmail  = rcmail::get_instance();
+            $context = $rcmail->config->get('krb_authentication_context');
+	    $args['gssapi_context'] = $context ?: 'imap/kolab.example.org@EXAMPLE.ORG';
+	    $args['gssapi_cn'] = $_SERVER['KRB5CCNAME'];
+	    $args['auth_type'] = 'GSSAPI';
+	}
+	return $args;
+    }
 }