Added SASL EXTERNAL authentication support

New auth_type 'sasl_external'.  Login is hard coded as 'external'
This commit is contained in:
Scott Shambarger
2019-11-03 20:14:12 +00:00
committed by Deon George
parent a8fe6f3274
commit da69ebf06a
4 changed files with 23 additions and 2 deletions

View File

@@ -314,6 +314,7 @@ $servers->setValue('server','name','My LDAP Server');
login will be required to use phpLDAPadmin for this server.
5. 'sasl': login will be taken from the webserver's kerberos authentication.
Currently only GSSAPI has been tested (using mod_auth_kerb).
6. 'sasl_external': login will be taken from SASL external mechanism.
Choose wisely to protect your authentication information appropriately for
your situation. If you choose 'cookie', your cookie contents will be
@@ -355,6 +356,9 @@ $servers->setValue('server','name','My LDAP Server');
NOTE: auth_type must be simple auth compatible (ie not sasl) */
# $servers->setValue('sasl','mech','PLAIN');
/* SASL EXTERNAL support... really a different auth_type */
# $servers->setValue('login','auth_type','sasl_external');
/* SASL authentication realm name */
// $servers->setValue('sasl','realm','');
# $servers->setValue('sasl','realm','EXAMPLE.COM');