search for: saml

...listener imap { > port = 143 > } > inet_listener imap2 { > port = 144 > } > } But I'm unsure how to configure imap/143 with "driver = ldap" and imap2/144 with "driver = pam" Just to explain why i would like this: I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) to enable saml-based access to dovecot. I would like to have one listener 144 to only serve this saml authentication listener, and the regular 143 listener with driver = ldap. Is that config possible? Best regards, MJ

We have just published a neat little toolkit for those of you who are interested in SAML-enabling your enterprise application. SAML is a standards-based single sign-on protocol, which allows an identity provider to securely log users into an application without a password. Some of the advantages of SAML that you avoid passwords altogether and can centralize access control at your ident...

Hi, In my journey to enable SAML auth for our webmail (sogo.nu) I have created a password-less dovecot imap listener on 127.0.0.1/32, so that once a user is SAML authenticated for the SOGo webmail, SOGo can connect to dovecot on 127.0.0.1:143 with something like "01 LOGIN username randompassword". Watching this (tcpfl...

...port = 144 > >> } > >> } > > > > But I'm unsure how to configure imap/143 with "driver = ldap" and > > imap2/144 with "driver = pam" > > > > Just to explain why i would like this: > > > > I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) to > > enable saml-based access to dovecot. I would like to have one listener > > 144 to only serve this saml authentication listener, and the regular 143 > > listener with driver = ldap. > > > > Is that config possible? >...

...t;> port = 144 >>> } >>> } >> >> But I'm unsure how to configure imap/143 with "driver = ldap" and >> imap2/144 with "driver = pam" >> >> Just to explain why i would like this: >> >> I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) >to >> enable saml-based access to dovecot. I would like to have one >listener >> 144 to only serve this saml authentication listener, and the regular >143 >> listener with driver = ldap. >> >> Is that config possible...

Hello everyone, I received a somewhat strange and complicated demand today. The idea of the manager is to use samba as a domain server but the directory tree (authentication and authorization of users) is on an external SAML server using keycloak. The samba will pass only GPO. Is this possible? As far as I've seen samba works the version of Windows Active Directory as well, and I've used it a lot as a domain server authenticating and authorizing users in addition to group policies. Thank you all, Thiago

...a samba > wrote: > > Hello everyone, > > I received a somewhat strange and complicated demand today. > > > > The idea of the manager is to use samba as a domain server but the > > directory tree (authentication and authorization of users) is on an > > external SAML server using keycloak. The samba will pass only GPO. > > > > Is this possible? > > > > As far as I've seen samba works the version of Windows Active > > Directory as > > well, and I've used it a lot as a domain server authenticating and > > authoriz...

...ting Office 365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. >> My questions: >> Can I map the existing Office365-Accounts to the new Domain? > One thing I would take a look at, also after I've read the recent answers, is the SAML interface for office365. I do not yet have a working environment using this but it seems promising. Here you'd need to set up an own IdP (for example using shibboleth) and connect this with the office365 users. I'm not sure how seemless this works but I think that there should be an idp bei...

On 3 Dec 2016, at 20.47, mj <lists at merit.unu.edu> wrote: > > Hi, > > In my journey to enable SAML auth for our webmail (sogo.nu) I have > created a password-less dovecot imap listener on 127.0.0.1/32, so that > once a user is SAML authenticated for the SOGo webmail, SOGo can connect to dovecot on 127.0.0.1:143 with something like "01 LOGIN username randompassword". > > Wa...

Can anyone direct me to a really good tutorial on Shibboleth integration with Rails, or indeed some sample code? I''ve been tearing my hair out all day on this one. Thanks RobL --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

...4 -0300, Thiago Anderson Santos via samba wrote: > Hello everyone, > I received a somewhat strange and complicated demand today. > > The idea of the manager is to use samba as a domain server but the > directory tree (authentication and authorization of users) is on an > external SAML server using keycloak. The samba will pass only GPO. > > Is this possible? > > As far as I've seen samba works the version of Windows Active > Directory as > well, and I've used it a lot as a domain server authenticating and > authorizing users in addition to group po...

Sorry if I didn't find the right manual. I would like to set up a new Domain Controller and connect it to an existing Office 365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. My questions: Can I map the existing Office365-Accounts to the new Domain? Is the existing username scheme in Office 365 of lois.griffin at company.com compatible

...>> inet_listener imap2 { >> port = 144 >> } >> } > > But I'm unsure how to configure imap/143 with "driver = ldap" and > imap2/144 with "driver = pam" > > Just to explain why i would like this: > > I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) to > enable saml-based access to dovecot. I would like to have one listener > 144 to only serve this saml authentication listener, and the regular 143 > listener with driver = ldap. > > Is that config possible? > > Best regards, > M...

...t; >> } > > > > > > But I'm unsure how to configure imap/143 with "driver = ldap" and > > > imap2/144 with "driver = pam" > > > > > > Just to explain why i would like this: > > > > > > I am using pam-script-saml (https://github.com/ck-ws/pam-script-saml) to > > > enable saml-based access to dovecot. I would like to have one listener > > > 144 to only serve this saml authentication listener, and the regular 143 > > > listener with driver = ldap. > > > > > > Is th...

...365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. >>> My questions: >>> Can I map the existing Office365-Accounts to the new Domain? >> One thing I would take a look at, also after I've read the recent answers, is the SAML interface for office365. I do not yet have a working environment using this but it seems promising. Here you'd need to set up an own IdP (for example using shibboleth) and connect this with the office365 users. I'm not sure how seemless this works but I think that there should be an idp bei...

...That's why i decided to post here. > I have no idea why you would have nopassword=y set in the first place, so it seems the simplest way to eliminate this problem is to take that out and have a secure environment for sending mail. Yes, however, for SOGo with Native Outlook compatibility or SAML logon, the config is required. (https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html) Thanks, MJ

Is there any information iI can grab on implementing MFA via the samba 4 AD? Perhaps via the Okta API or SAML? JD

...trying to decide if dovecot is the right option (I'm committed to self-hosting). I'm a developer, so happy to do my own tooling if needed. *Is there currently a good webmail interface to dovecot, or work-in progress?* If not, would a web interface be out-of-scope for dovecot? I want to use SAML for authentication, so a solution that relies on POP/IMAP doesn't meet my needs - unless I add Kerberos into the mix, which is an additional learning curve, and possibly not widely supported. *Is there currently a good web admin interface to dovecot, or work-in-progress?* If not, would a web i...

...ting Office 365 with Exchange in a way, AD-Users of a certain group can login and not having to login to Office365. > > My questions: > > Can I map the existing Office365-Accounts to the new Domain? One thing I would take a look at, also after I've read the recent answers, is the SAML interface for office365. I do not yet have a working environment using this but it seems promising. Here you'd need to set up an own IdP (for example using shibboleth) and connect this with the office365 users. I'm not sure how seemless this works but I think that there should be an idp...

...a way, AD-Users of a certain >> group can login and not having to login to Office365. >> >> My questions: >> >> Can I map the existing Office365-Accounts to the new Domain? > One thing I would take a look at, also after I've read the recent > answers, is the SAML interface for office365. I do not yet have a > working environment using this but it seems promising. Here you'd need > to set up an own IdP (for example using shibboleth) and connect this > with the office365 users. I'm not sure how seemless this works but I > think that there...