Req #52231 [Com]: SOAP extension doesn't support kerberos authentication

From: Date: Wed, 05 Nov 2014 15:39:31 +0000
Subject: Req #52231 [Com]: SOAP extension doesn't support kerberos authentication
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-188467@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=52231&edit=1

 ID:                 52231
 Comment by:         RGeorge at agtfoods dot com
 Reported by:        andres dot maier at abf dot ch
 Summary:            SOAP extension doesn't support kerberos
                     authentication
 Status:             Open
 Type:               Feature/Change Request
 Package:            SOAP related
 Operating System:   Win IIS7, ZendServer PHP 5.2.11
 PHP Version:        Irrelevant
 Block user comment: N
 Private report:     N

 New Comment:

We are also having the same problem. The SoapClient class does not successfully construct if we are
requesting a wsdl that is using Kerberos authentication.


Previous Comments:
------------------------------------------------------------------------
[2014-10-24 13:12:52] radcliffe at gmx dot de

Are there any infos an that request the PHP devs can give us? We would also need that functionality.

Thanks!

------------------------------------------------------------------------
[2010-07-02 10:07:24] andres dot maier at abf dot ch

Description:
------------
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment,
the SOAP extension only provides BASIC and DIGEST authentication.

Environment:
Client
Windows XP/Vista/7
IE 7/8

Webserver
Windows 2003/2008 Server
IIS 7
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

Scenario:
client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) --> 
Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on
the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL
extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with
GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE
authentication could not be set as cURL-option --> we couldn't test that yet and we
won't be able to without any help.



------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=52231&edit=1


Thread (3 messages)

« previous php.bugs (#188467) next »