Re: [phpldapadmin] Fwd: [ phpldapadmin-Feature Requests-2073323 ] Using Single Sign On authentication
"Clément OUDOT" <[email protected]>
| Newsgroups | gmane.comp.ldap.davedap |
|---|---|
| Message-ID | <[email protected]> |
2008/12/13 Deon George <[email protected]>: > Thats what I thought. > > I dont think php-ldap supports this? > > With PHP you need to bind with credentials - I cant see how you can bind > with 1 ID, and "su" with another...? Ok, I propose two things : - First case, we send user and passwd in HTTP headers. So it is similar to basic authentication, except we have to use HTTP headers values. - Second case, we only send user in HTTP headers (for security reasons), and we use the LDAP control 2.16.840.1.113730.3.4.18 (http://tools.ietf.org/html/rfc4370) that allows to run LDAP operations with the identity of the connected user. I think the first case is very simple to implement? Clément. ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ ______________________________________ phpLDAPadmin development mailing list. To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel http://phpldapadmin.sourceforge.net/