Re: PHP and Kerberos5 Single Sign-on

On Fri, 2004-02-13 at 10:34, Ricky Boone wrote: > I can get the Linux server to talk to Active Directory through LDAP and > Kerberos, but to achieve SSO the only way to get it to work on Apache is > with mod_auth_gss_krb5 (though I can't seem to get it to build for > Apache2), and I couldn't find anything that would do the same with PHP. PHP supports ldap[1] which should allow you to talk to Active Directory, also there is mod_auth_kerb[2] for kerberos authentication. If you are against using an apache module for kerberos you can try using pam_auth[3] in PHP with a kerberos module for pam. I do not think PHP supports kerberos natively, though you could hack together an extension for it if you were motivated enough. :) [1] http://www.php.net/ldap [2] http://modauthkerb.sourceforge.net/ [3] http://www.math.ohio-state.edu/~ccunning/pam_auth/ -- Adam Bregenzer adam@bregenzer.net http://adam.bregenzer.net/