How to configure Kerberos authorization in SOAP API in php?

Question

PHP

There is a SOAP api written in php. The system is on RHEL, the machine is entered into the domain: in the browser, ntlm authorization works for users - everything is ok with this.

But now it is necessary to make that when requesting the API, domain authorization occurred: like a kerberos ticket comes to us, on our side we somehow have to understand and verify this request, and then we already do all the necessary processing logic.

And at this verification stage, a problem arose - I just don’t understand how it should work (
Well, in general terms, there is an understanding: in theory, I should contact the domain controller with this ticket, he should give me an answer and I’m happy in the case success, I do everything else.But I didn’t find examples of this in the apache + php bundle at all, how to turn this whole thing around.

Answer 1

I would go the easy way. I would steal the idea from nginx. The second option is to put the application in a trusted circuit and use some kind of ldap helper inside to query the directory.

Answer 2

via ldap php extension