验证对从PHP的Active Directory / ISA [英] Authenticate against Active Directory/ISA from php

问题描述

我有一个复杂的问题，这一事实加剧了我真的不知道从哪里开始！

I have a complicated problem, exacerbated by the fact I don't really know where to start!

在过去的几年里，我已经开发了一些PHP网页为基础的系统。当我建立了他们，我们的网络是举步维艰，在最好的，所以我认为没有什么创造我自己的用户名/密码的东西。

Over the last few years, I've developed a number of php web-based systems. When I built them, our network was ropey at best, so I thought nothing of creating my own username/password stuff.

从那时起，我们的网络已经成为了很多更强大的，我们的管理员已经安装了ISA服务器的其他各种东西，我的应用程序留下令人沮丧的遗物，人们忘记了自己的密码，并永远不会知道哪一个是属于什么。

Since then, our network has become a lot more robust, our admins have installed an ISA server for various other things and my apps are left as frustrating relics that people forget their passwords and are never sure which one belongs to what.

我希望能够用的东西，会跟在ISA /主动目录的东西，使用户可以只使用他们的主要用户名和密码登录到我的东西太更换自己的登录code。

I would like to be able to replace my own login code with something that will talk to the the ISA/Active directory stuff so users can just use their primary username and password to log onto my stuff too.

部分困难是，PHP应用程序是我们的网络之外的托管，虽然我也有在网络内部的服务器在必要时充当网关。我所访问的服务器都运行Linux，但我的也许的能够说服别人在Windows中安装一个插件，如果它是绝对必要的。

Part of the difficulty is that the PHP apps are hosted outside of our network, although I do also have a server inside the network to act as a gateway if necessary. All of the servers I have access to are running Linux, although I might be able to persuade someone to install a 'plugin' on a windows box if it is absolutely necessary.

我从哪里开始？

推荐答案

如果PHP是Apache下运行，你应该能够使用mod_ldap模块和mod_authnz_ldap模块来验证您的Active Directory服务器。

If PHP is running under Apache you should be able to use mod_ldap and mod_authnz_ldap to authenticate to your Active Directory server.

还有对PHP，你应该调查一个相当完整的LDAP API。

There's also a fairly complete LDAP API for PHP, which you should investigate.

这篇关于验证对从PHP的Active Directory / ISA的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！