php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #52231 SOAP extension doesn't support kerberos authentication
Submitted: 2010-07-02 10:07 UTC Modified: -
Votes:15
Avg. Score:4.9 ± 0.5
Reproduced:15 of 15 (100.0%)
Same Version:2 (13.3%)
Same OS:8 (53.3%)
From: andres dot maier at abf dot ch Assigned:
Status: Open Package: SOAP related
PHP Version: Irrelevant OS: Win IIS7, ZendServer PHP 5.2.11
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: andres dot maier at abf dot ch
New email:
PHP Version: OS:

 

 [2010-07-02 10:07 UTC] andres dot maier at abf dot ch
Description:
------------
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment, the SOAP extension only provides BASIC and DIGEST authentication.

Environment:
Client
Windows XP/Vista/7
IE 7/8

Webserver
Windows 2003/2008 Server
IIS 7
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

Scenario:
client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) -->  Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE authentication could not be set as cURL-option --> we couldn't test that yet and we won't be able to without any help.


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-10-24 13:12 UTC] radcliffe at gmx dot de
Are there any infos an that request the PHP devs can give us? We would also need that functionality.

Thanks!
 [2014-11-05 15:39 UTC] RGeorge at agtfoods dot com
We are also having the same problem. The SoapClient class does not successfully construct if we are requesting a wsdl that is using Kerberos authentication.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Oct 04 19:01:27 2024 UTC