Dovecot + Roundcube + One Time Password Authentification = Possible?

Question

As stated in the topic, I would like to install the dovecot imapserver, and enable web-access via the roundcube-client. To heighten security when logging in from unsecure machines, I would like to login via One Time Passwords (e.g. OPIE). Would that be possible? Does anyone have experience implementing such a feature into to a webmail client?

score 1 · Answer 1 · edited Sep 26 '12 at 10:03

1

FYI, there is a One-Time Password plugin for SquirrelMail (OTPs generated in the webmail layer, but can use an optional static prefix deployed via external means).

There is also an authentication plugin that can be configured, amongst other things, to make SquirrelMail SSO-aware (how helpful that is to this question depends on how strong the authentication is for the SSO system).

edited Sep 26 '12 at 10:03

HopelessN00b

53,385
32
133
208

answered Sep 26 '12 at 07:22

Paul Lesniewski

21
2

score 0 · Accepted Answer · edited Jun 06 '14 at 18:06

This tutorial is a bit old, but should a good guide whatever two-factor auth system you choose. To get two-factor authentication working on linux, your best bet is to go through PAM. Point PAM to your two-factor auth server via pam-radius, pam-ldap etc.

http://www.wikidsystems.com/support/wikid-support-center/how-to/how-to-configure-webmail-for-wikid-strong-authentication/?searchterm=imap

There's also a feature request to allow SASL OTP in Roundcube.

hth

nick

Dovecot + Roundcube + One Time Password Authentification = Possible?

2 Answers2