pulsejet / roundcube-oidc Goto Github PK

View Code? Open in Web Editor NEW

7.0 3.0 4.0 51 KB

OpenID Connect authentication plugin for Roundcube

Home Page: https://packagist.org/packages/radialapps/roundcube-oidc

License: MIT License

PHP 100.00%

openid-connect roundcube oidc oidc-client roundcube-plugin

roundcube-oidc's Introduction

Roundcube OIDC

This plugin allows you to authenticate users to roundcube using an OpenID Connect 1.0 provider. There are three modes to run the plugin in:

Cleartext Password: The OIDC provider must supply the user's password in cleartext, which is then used to login to the IMAP server
Master Password: In this mode (also falls back to this), a master password is used to login to the IMAP server with the username obtained from OIDC
Master User: IMAP authentication is done using a master user (Dovecot) with a provided separator

Check the config.inc.php for more details on configuration.

SMTP

Note that unless cleartext passwords are provided, SMTP must necessarily be configured use no authentication or a master password

Installation

To install, get the plugin with composer in your roundcube directory

composer require radialapps/roundcube-oidc

Alternatively, some releases may be available as zipped packages here at GitHub. You need to unzip the package in your plugins directory and activate the plugin in the configuration.

License

Permissively licensed under the MIT license

roundcube-oidc's People

Contributors

Stargazers

Watchers

Forkers

formula-student chaserdoe arnebr rstefko

roundcube-oidc's Issues

Installation problem (roundcube 1.4.9)

php 7.3.23
roundcube 1.4.9

I am trying to connect with keycloak.

I don't know what's the problem.

I have a very low level of program knowledge.

Problem 1
- endroid/qr-code is locked to version 1.6.6 and an update of this package was not requested.
- endroid/qr-code 1.6.6 requires ext-gd * -> it is missing from your system. Install or enable PHP's gd extension.
Problem 2
- pear/net_ldap2 v2.2.0 requires ext-ldap * -> it is missing from your system. Install or enable PHP's ldap extension.
- kolab/net_ldap3 v1.1.3 requires pear/net_ldap2 >=2.0.12 -> satisfiable by pear/net_ldap2[v2.2.0].
- kolab/net_ldap3 is locked to version v1.1.3 and an update of this package was not requested.

To enable extensions, verify that they are enabled in your .ini files:
-
- /usr/local/etc/php/conf.d/docker-php-ext-pdo_mysql.ini
- /usr/local/etc/php/conf.d/docker-php-ext-pdo_pgsql.ini
- /usr/local/etc/php/conf.d/docker-php-ext-sodium.ini
- /usr/local/etc/php/conf.d/docker-php-ext-zip.ini
- /usr/local/etc/php/conf.d/roundcube.ini
- /usr/local/etc/php/conf.d/timezone.ini
You can also run php --ini inside terminal to see which files are used by PHP in CLI mode.

Roundcube session survives OIDC logout

I'm running Roundcube side-by-side w/Nextcloud (actually embedded in an i-frame using Nextcloud's "external" app) with Keycloak OIDC as the login mechanism for both. SLO works perfectly. But SSO isn't working -- I need to log out of Nextcloud and Roundcube separately. In particular I've discovered that logging out of Nextcloud (and successfully deleting the Keycloak OIDC session) still leaves a valid Roundcube session cookie. Is there some way to ensure that Roundcube looks for both the OIDC session as well as its own session cookie?

postfix master password?

I know dovecot has this but postfix? I can't find a reference to postfix having a master password anywhere. Can you point me to some documentation please?

Bug: Disables features in RC

Whenever I log in with OIDC using this plugin, I notice that a few few features seem to be absent in the UI, chiefly the threaded view for folders in no longer available. When I log out, and log back in using a user name and password, the threaded option returns.

I have not done any testing beyond that as of yet.

When use SSO login - this is what's expected: a user just uses own creds and login to the service.

Did not find anything about it in docs/configs

Please clarify