Setup 2-FA for a Zimbra Mail Server

Question
1

Hi Cornelius,

I just want to have some information concerning a Zimbra mail server and
privacyIdea.

Do you think it’s possible to setup a 2 factor authentication (with
login/password and OTP) on a Zimbra mail server, using privacyIdea and
without using the paid version of Zimbra (Network edition) ?

Thanks in advance,

Kind regards,

CK

2

There is a plugin for the kopano (a.k.a. zarafa) web application if you
only want to do 2FA in a web frontend.
https://github.com/bytemine/webapp-privacyidea

Either migrate to kopano :wink:
or you can use this as a starting point.

Kind regards
CorneliusAm Donnerstag, 12. Januar 2017 14:24:24 UTC+1 schrieb CK:

Hi Cornelius,

I just want to have some information concerning a Zimbra mail server and
privacyIdea.

Do you think it’s possible to setup a 2 factor authentication (with
login/password and OTP) on a Zimbra mail server, using privacyIdea and
without using the paid version of Zimbra (Network edition) ?

Thanks in advance,

Kind regards,

CK

3

Hi Chahal,

I never used Zimbra. Maybe someone else can comment on this?
You need the possibility to plug into the authentication process, like
using PAM or RADIUS.
Most probably PAM. Then you can add 2FA.

But the other question is, if you like adding 2FA to a mailserver:
You probably do not want to enter a 2nd factor each time you fetch mails or
send mails.

So the mailserver must be capable of some kind of caching the
authentication state. This differs a lot between applications. I think
dovecot is capable of doing so.

Kind regards
CorneliusAm Donnerstag, 12. Januar 2017 14:24:24 UTC+1 schrieb CK:

Hi Cornelius,

I just want to have some information concerning a Zimbra mail server and
privacyIdea.

Do you think it’s possible to setup a 2 factor authentication (with
login/password and OTP) on a Zimbra mail server, using privacyIdea and
without using the paid version of Zimbra (Network edition) ?

Thanks in advance,

Kind regards,

CK