Re: [phpldapadmin] Fwd: [ phpldapadmin-Feature Requests-2073323 ] Using Single Sign On authentication

2008/12/14 Deon George <[email protected]>:
> Clement,
>
> The first case is easy - PLA can just pluck out the variables and use
> them for authentication. It already does that for http_auth, but we can
> "configure" the variables that it plucks these details from. In this
> case though, the variables will need to hold the "end" users DN (or
> login attribute), and their password. (PLA will use these details when
> connecting to the LDAP server.)

Yes, great. In this case, PLA will have config parameters to set the
HTTP headers name containing the login (or the DN) and the password.

> The second case cant be done I dont think. When calling php-ldap, there
> is no function in this library (that I am aware of) that enables you to
> execute the LDAP operation as another user? (Unless you have some sample
> code, or details of the php ldap library that provides this?)

We have to try to set controls like that :

<?php
// $ds is a valid link identifier for a directory server
// control with no value
$ctrl1 = array("oid" => "1.2.752.58.10.1", "iscritical" => true);
// iscritical defaults to FALSE
$ctrl2 = array("oid" => "1.2.752.58.1.10", "value" => "magic");
// try to set both controls
if (!ldap_set_option($ds, LDAP_OPT_SERVER_CONTROLS, array($ctrl1, $ctrl2))) {
    echo "Failed to set server controls";
}
?>

And to study how use the specific Authorization Proxy Control. It is
cleary more difficult thant the first case :)

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/