[SSSD-users] Re: Apache/php integration

[Ondrej Valousek]

It is indeed - I see it's even in the official Rhel repo!
Thanks,

Ondrej

-Original Message-
From: Sumit Bose [mailto:sb...@redhat.com] 
Sent: Monday, March 12, 2018 8:55 AM
To: sssd-users@lists.fedorahosted.org
Subject: [SSSD-users] Re: Apache/php integration

On Fri, Mar 09, 2018 at 02:43:11PM +, Ondrej Valousek wrote:
> Hi all,
> 
> I see there is a new client API available for sssd 1.16. Is it possible to 
> integrate it somehow with Apache/php?
> I.e. example: I authenticate user via mod_auth_gssapi obtaining username (and 
> possibly TGT) so I need to lookup user's email address, say

It sounds like https://www.adelton.com/apache/mod_lookup_identity/ is what you 
are looking for.

HTH

bye,
Sumit

> 
> Ondrej
> 
> -
> 
> The information contained in this e-mail and in any attachments is 
> confidential and is designated solely for the attention of the intended 
> recipient(s). If you are not an intended recipient, you must not use, 
> disclose, copy, distribute or retain this e-mail or any part thereof. If you 
> have received this e-mail in error, please notify the sender by return e-mail 
> and delete all copies of this e-mail from your computer system(s). Please 
> direct any additional queries to: communicati...@s3group.com. Thank You. 
> Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 
> 378073. Registered Office: South County Business Park, Leopardstown, Dublin 
> 18.

> ___
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org To 
> unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe 
send an email to sssd-users-le...@lists.fedorahosted.org

-

The information contained in this e-mail and in any attachments is confidential 
and is designated solely for the attention of the intended recipient(s). If you 
are not an intended recipient, you must not use, disclose, copy, distribute or 
retain this e-mail or any part thereof. If you have received this e-mail in 
error, please notify the sender by return e-mail and delete all copies of this 
e-mail from your computer system(s). Please direct any additional queries to: 
communicati...@s3group.com. Thank You. Silicon and Software Systems Limited (S3 
Group). Registered in Ireland no. 378073. Registered Office: South County 
Business Park, Leopardstown, Dublin 18.
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: Apache/php integration

[Sumit Bose]

On Fri, Mar 09, 2018 at 02:43:11PM +, Ondrej Valousek wrote:
> Hi all,
> 
> I see there is a new client API available for sssd 1.16. Is it possible to 
> integrate it somehow with Apache/php?
> I.e. example: I authenticate user via mod_auth_gssapi obtaining username (and 
> possibly TGT) so I need to lookup user's email address, say

It sounds like https://www.adelton.com/apache/mod_lookup_identity/ is
what you are looking for.

HTH

bye,
Sumit

> 
> Ondrej
> 
> -
> 
> The information contained in this e-mail and in any attachments is 
> confidential and is designated solely for the attention of the intended 
> recipient(s). If you are not an intended recipient, you must not use, 
> disclose, copy, distribute or retain this e-mail or any part thereof. If you 
> have received this e-mail in error, please notify the sender by return e-mail 
> and delete all copies of this e-mail from your computer system(s). Please 
> direct any additional queries to: communicati...@s3group.com. Thank You. 
> Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 
> 378073. Registered Office: South County Business Park, Leopardstown, Dublin 
> 18.

> ___
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: Apache/php integration

[Jakub Hrozek]

The new API is a C one, currently it’s used by slapi-nis only, I think.

I wonder if using the already existing D-Bus API would be an option? I don’t 
know how good or bad are PHP D-Bus bindigs, but looking up the e-mail address 
works for sure, check out e.g.:
https://github.com/jhrozek/fosdem2018/blob/master/dbus-api/dbus_example_simple.py

> On 9 Mar 2018, at 15:43, Ondrej Valousek  wrote:
> 
> Hi all,
>  
> I see there is a new client API available for sssd 1.16. Is it possible to 
> integrate it somehow with Apache/php?
> I.e. example: I authenticate user via mod_auth_gssapi obtaining username (and 
> possibly TGT) so I need to lookup user’s email address, say….
>  
> Ondrej
> -
> 
> The information contained in this e-mail and in any attachments is 
> confidential and is designated solely for the attention of the intended 
> recipient(s). If you are not an intended recipient, you must not use, 
> disclose, copy, distribute or retain this e-mail or any part thereof. If you 
> have received this e-mail in error, please notify the sender by return e-mail 
> and delete all copies of this e-mail from your computer system(s). Please 
> direct any additional queries to: 
> communicati...@s3group.com. Thank You. Silicon and Software Systems Limited 
> (S3 Group). Registered in Ireland no. 378073. Registered Office: South County 
> Business Park, Leopardstown, Dublin 18.
> ___
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org