✨ Kerberos SSO

[enguerr]

Hello,
Thanks for your work on this plugin.
I've got to edit this plugin in order to fit my needs.
I've a reverse proxy with Kerberos SSO enabled.
i needed to enable basic auth with 'REMOTE_USER' OR 'PHP_AUTH_USER' with auto-provisionning.
I've read that you planned to add this, and i've just completed the config.

I've temporarly added my url in the project in order to inform my team about updates.
But if you accept my pull request, i will reset the headers in php files to redirect to your project instead of mine.

Tell me if your project page is always alive and if you want to maintain this project with my contributions.

[madmath03]

Hi @enguerr ,

Thanks for sending this PR and the love ❤️

Yes, this project is still alive. We just did not do any enhancement lately since the current features match our needs. We plan to go back on this when we have "free time".

I will review your PR and let you know asap if we're going to accept this 😉

[madmath03]

Made a few comments.

Also, in general, I'm not sure that it's a good idea for this plugin to use Kerberos as it's a bit too AD centric.
A more generic process which would work on both OpenLDAP and AD is to login against LDAP with "admin" credentials, search for requested user, then verify password.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.