Re: [phpldapadmin] Fwd: [ phpldapadmin-Feature Requests-2073323 ] Using Single Sign On authentication

Clement,

The first case is easy - PLA can just pluck out the variables and use
them for authentication. It already does that for http_auth, but we can
"configure" the variables that it plucks these details from. In this
case though, the variables will need to hold the "end" users DN (or
login attribute), and their password. (PLA will use these details when
connecting to the LDAP server.)

The second case cant be done I dont think. When calling php-ldap, there
is no function in this library (that I am aware of) that enables you to
execute the LDAP operation as another user? (Unless you have some sample
code, or details of the php ldap library that provides this?)

...deon

Clément OUDOT wrote:
> Ok, I propose two things :
> - First case, we send user and passwd in HTTP headers. So it is
> similar to basic authentication, except we have to use HTTP headers
> values.
> - Second case, we only send user in HTTP headers (for security
> reasons), and we use the LDAP control 2.16.840.1.113730.3.4.18
> (http://tools.ietf.org/html/rfc4370) that allows to run LDAP
> operations with the identity of the connected user.
>
> I think the first case is very simple to implement?

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/