php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #52231 SOAP extension doesn't support kerberos authentication
Submitted: 2010-07-02 10:07 UTC Modified: -
Votes:15
Avg. Score:4.9 ± 0.5
Reproduced:15 of 15 (100.0%)
Same Version:2 (13.3%)
Same OS:8 (53.3%)
From: andres dot maier at abf dot ch Assigned:
Status: Open Package: SOAP related
PHP Version: Irrelevant OS: Win IIS7, ZendServer PHP 5.2.11
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: andres dot maier at abf dot ch
New email:
PHP Version: OS:

 

 [2010-07-02 10:07 UTC] andres dot maier at abf dot ch 
Description:
------------
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment, the SOAP extension only provides BASIC and DIGEST authentication.

Environment:
Client
Windows XP/Vista/7
IE 7/8

Webserver
Windows 2003/2008 Server
IIS 7
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

Scenario:
client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) -->  Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE authentication could not be set as cURL-option --> we couldn't test that yet and we won't be able to without any help.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-10-24 13:12 UTC] radcliffe at gmx dot de 
Are there any infos an that request the PHP devs can give us? We would also need that functionality.

Thanks!
 [2014-11-05 15:39 UTC] RGeorge at agtfoods dot com 
We are also having the same problem. The SoapClient class does not successfully construct if we are requesting a wsdl that is using Kerberos authentication.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Mar 26 20:01:30 2025 UTC