php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #52231 SOAP extension doesn't support kerberos authentication
Submitted: 2010-07-02 10:07 UTC Modified: -
Votes:14
Avg. Score:4.9 ± 0.5
Reproduced:14 of 14 (100.0%)
Same Version:2 (14.3%)
Same OS:8 (57.1%)
From: andres dot maier at abf dot ch Assigned:
Status: Open Package: SOAP related
PHP Version: Irrelevant OS: Win IIS7, ZendServer PHP 5.2.11
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: andres dot maier at abf dot ch
New email:
PHP Version: OS:

 

 [2010-07-02 10:07 UTC] andres dot maier at abf dot ch
Description:
------------
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment, the SOAP extension only provides BASIC and DIGEST authentication.

Environment:
Client
Windows XP/Vista/7
IE 7/8

Webserver
Windows 2003/2008 Server
IIS 7
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

Scenario:
client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) -->  Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE authentication could not be set as cURL-option --> we couldn't test that yet and we won't be able to without any help.


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-10-24 13:12 UTC] radcliffe at gmx dot de
Are there any infos an that request the PHP devs can give us? We would also need that functionality.

Thanks!
 [2014-11-05 15:39 UTC] RGeorge at agtfoods dot com
We are also having the same problem. The SoapClient class does not successfully construct if we are requesting a wsdl that is using Kerberos authentication.
 
PHP Copyright © 2001-2020 The PHP Group
All rights reserved.
Last updated: Sat Feb 29 04:01:28 2020 UTC