PHP/Kerberos Support

[giridhars]

Hello,

I have an application that is developed using PHP. We currently have a security mechanism (user login/password sent over SSL). I have a new requirement where my customer is asking for kerberos authentication for my application. He has a KDC set up which is being used centrally by many applications. He wants our application too to talk to this KDC for authentication.

I want to know if PHP provides Kerberos libraries to be able to talk to the KDC and authenticate users. I do find an option --with-kerberos=DIR while compiling PHP but when I search for functions/methods to be used in order to use this authentication mechanism in my code, I don't find any. Can somebody help me understand if at all there is any support in PHP for Kerberos based authentication mechanism ?

If not, then I guess another alternative is to explore if there exists any kerberos PAM that I can plug-in to Apache. Has anybody done this ? Is this feasible too ?

Regards,
Giri

[LukeO]

Hmmmm, I beleive that php does come with some kerberos functions, but as far as I can remember, they are very limited. Your plugin solution would probably be the best way to go as it is likely to offer everything you need.

Luke