New Package Proposal: Enterprise A&A
| From: | Tony Bibbs | Date: | Tue, 14 Jan 2003 18:37:29 +0000 |
| Subject: | New Package Proposal: Enterprise A&A | ||
| Groups: | php.pear.dev | ||
| Request: | Send a blank email to pear-dev+get-12419@lists.php.net to get a copy of this message | ||
I have a package still in alpha but has most of the key components
working. It is aimed to be an Enterprise Authentication & Authorization
service. The key features are:
1) XML-RPC based (future version moved to SOAP/WSDL)
2) Implements a single-credential set across multiple applications
3) Extendable. This library uses the concept of a provider. By default
it will ship with a SQL Provider (using PEAR::DB) and can be easily
adapted for LDAP or any custom needs. (I could use help with LDAP if there
are any takers)
4) 100% OO, PHP client will return a serializable user object that holds
all authorization data for a user.
5) Extensive logging. Troubleshooting can be a pain when the client and
server are separated. This is alleviated a bit using PEAR::Log
The end state of this will be allowing for single sign-on. I hope to do
this by integrating all this with the liberty project.
I know you already have a few A&A-based packages, admittedly I haven't
looked at any of them. My hunch is this is the first one that aims to be
true web service and plans to support single sign-on.
--
------------------------------------------------------------------------|
Tony Bibbs | "I guess you have to remember that those who don't |
tony@tonybibbs.com | hunt or fish often see those of us who do as |
| harmlessly strange and sort of amusing. When you |
| think about it, that might be a fair assessment." |
| --Unknown |
------------------------------------------------------------------------|