php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #52231 SOAP extension doesn't support kerberos authentication
Submitted: 2010-07-02 10:07 UTC Modified: -
Votes:15
Avg. Score:4.9 ± 0.5
Reproduced:15 of 15 (100.0%)
Same Version:2 (13.3%)
Same OS:8 (53.3%)
From: andres dot maier at abf dot ch Assigned:
Status: Open Package: SOAP related
PHP Version: Irrelevant OS: Win IIS7, ZendServer PHP 5.2.11
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please — but make sure to vote on the bug!
Your email address:
MUST BE VALID
Solve the problem:
27 - 10 = ?
Subscribe to this entry?

 
 [2010-07-02 10:07 UTC] andres dot maier at abf dot ch 
Description:
------------
We need to have the ability to use kerberos authentication with the SOAP extension. At the moment, the SOAP extension only provides BASIC and DIGEST authentication.

Environment:
Client
Windows XP/Vista/7
IE 7/8

Webserver
Windows 2003/2008 Server
IIS 7
ZendServer PHP 5.2.11

Exchange Server
Windows 2003/2008
Exchange WS 2007/2010

Scenario:
client  -- request (kerberos auth) -->  webserver  -- SOAP request (client kerberos auth) -->  Exchange WS

The SOAP request doesn't forward the client kerberos token, so we can't authenticate on the exchange server.

We also tried to override the __doRequest function and reproduce the whole procedure with the cURL extension. We then could authenticate with NTLM, but we couldn't find any cURL binaries with GSSAPI support neither could we compile cURL with GSSAPI support on windows - so GSSNEGOTIATE authentication could not be set as cURL-option --> we couldn't test that yet and we won't be able to without any help.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-10-24 13:12 UTC] radcliffe at gmx dot de 
Are there any infos an that request the PHP devs can give us? We would also need that functionality.

Thanks!
 [2014-11-05 15:39 UTC] RGeorge at agtfoods dot com 
We are also having the same problem. The SoapClient class does not successfully construct if we are requesting a wsdl that is using Kerberos authentication.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Apr 25 20:01:45 2024 UTC