如何使用没有用户名和密码的Active Directory在PHP中验证用户

Question

How to authenticate users in PHP using Active Directory without username and password. When a domain user login, it can also logged in PHP application which is connected with Active Directory.

Answer 1

What you are looking for is seamless kerberos SSO authentication using active directory where a browser automatically sends some negotiation token that you need to verify. Usually, this is delegated to the web server. There are several Apache plugins to do so:

mod_auth_sspi for Apache on Windows: http://mod-auth-sspi.sourceforge.net/

mod_auth_kerb for Apache on Linux: http://modauthkerb.sourceforge.net

mod_ntlm for Apache on Linux: http://modntlm.sourceforge.net

mod_auth_ntlm_winbind for Apache http://adldap.sourceforge.net/wiki/doku.php?id=mod_auth_ntlm_winbind