We need to be able to create Authentication plugins since sharepoint have multiple was to authenticate a user. We need to make the Authentication system pluggable, so that we can support some of them, and let other modules provide other methods of authentication.

Comments

wheyse’s picture

An overview of the authentication methods in sharepoint 2010:
http://technet.microsoft.com/en-us/library/cc262350.aspx#section1

wheyse’s picture

nusoap can support basic, digest, certificate and ntlm authentication.
If we want to support other methods, we will have to implement this at the nusoap level. nusoap's authentication doesn't seem pluggable at all.
Another possibility is to make the soap library pluggable. However, soap libraries tend to return data in their own format, so we would have to implement an extra layer on top of soap.
I'm not aware of any php soaplibraries being able to do any authentication not supported by nusoap.

fabsor’s picture

Version: » 7.x-1.x-dev

We should start off supporting what nusoap supports. When (of if =) we need to support other methods, we will have to have a a look at nusoap and see how we should go about that. We might get away with extending the nusoap classes, otherwise I guess we would have to create a patch to the library itself.

@wheyse do you agree?

wheyse’s picture

I agree. The nusoap library uses curl for it's http communication (http://www.php.net/manual/en/book.curl.php). So everything that is supported by libcurl could in theory be reasonably easy to integrate in nusoap. We'll probably have to do this with a patch a think.
Kerberos authentication would be a very nice testcase :)

wheyse’s picture

verta’s picture

Issue tags: +authentication

added tag, following