|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #52231 SOAP extension doesn't support kerberos authentication
Submitted: 2010-07-02 10:07 UTC Modified: -
Avg. Score:4.9 ± 0.5
Reproduced:15 of 15 (100.0%)
Same Version:2 (13.3%)
Same OS:8 (53.3%)
From: andres dot maier at abf dot ch Assigned:
Status: Open Package: SOAP related
PHP Version: Irrelevant OS: Win IIS7, ZendServer PHP 5.2.11
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Bug Type:
From: andres dot maier at abf dot ch
New email:
PHP Version: OS:


 [2010-07-02 10:07 UTC] andres dot maier at abf dot ch
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment, the SOAP extension only provides BASIC and DIGEST authentication.

Windows XP/Vista/7
IE 7/8

Windows 2003/2008 Server
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) -->  Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE authentication could not be set as cURL-option --> we couldn't test that yet and we won't be able to without any help.


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2014-10-24 13:12 UTC] radcliffe at gmx dot de
Are there any infos an that request the PHP devs can give us? We would also need that functionality.

 [2014-11-05 15:39 UTC] RGeorge at agtfoods dot com
We are also having the same problem. The SoapClient class does not successfully construct if we are requesting a wsdl that is using Kerberos authentication.
PHP Copyright © 2001-2023 The PHP Group
All rights reserved.
Last updated: Sun Apr 02 13:03:41 2023 UTC