PHP programming SSO detailed introduction and simple examples, php programming sso detailed introduction
Php sso details
SSO has three modes: ① Cross-subdomain single-point login ② full cross-point domain login ③ site group shared identity authentication
The first mode is simple. You only need to set the Cookie domain
Python-ldap login case, python-ldap case
1 ldap_config = {2 'ldap _ path': 'ldap: // xx. xx. xx. xx: 389 ', 3'base _ dn': 'ou = users, dc = ledo, dc = com', 4'ldap _ user': 'uid = reporttest, ou = users, dc = ledo, dc = com ', 5 'ldap
LDAP-Series-1-Chapter-3-PHP-LDAPIfyouwanttousePHPwithldap.Youhavetoaddtheextensionlib. (ldap. so) GototheinstallfileofPHP. $ cdoptphp-5.4.5extldap $ us LDAP-Series-1-Chapter-3-PHP-LDAP
If you want to use PHP with ldap. You have to add the extension lib. (
1. Installation Error message:Error:microsoft Visual C + + 9.0 is required. Get it from HTTP://AKA.MS/VCPYTHon272. Do not use the PIP install PYTHON-LDAP django-auth-ldap,pip Install the latest version3. Go to the official website to find the lower version download: https://pypi.python.org/pypi/django-auth-ldap/1.1.4https://pypi.python.org/pypi/python-
Single Sign-On SSO principles and implementation methods, Single Sign-On sso principlesCore Ideology
Centralized storage of user information (Global Cooike, centralized Session, Json Web Token, Redis Cache Server, and custom SSO server)
Authentication (executed in Filter)
Log out (different sites must be synchronized)
Implementation Method
user needs single sign-on (SSO), and the basis for successful SSO is that we have a good directory base.At present, Domino based applications are implemented in many organizations, such as Office, Mail, approval, etc. As an excellent platform compatible with a variety of standards, Domino also provides good support for LDAP v3.So what about the institutions that
systems. It intercepts the SSO requests from the client and forwards the requests to the SSO server. If OCSP requests are forwarded, the SSO server forwards the requests to the OCSP server. In the C/S mode, the SSO proxy is usually deployed on the client.
5. PMI: includes the PMI proxy and PMI server. The PMI agent is
A DN is comprised of a series of RDNs (Relative distinguished Names) found by walking up the tree (DIT) to its root (or Su Ffix or base) and is written left to right unlike the file system analogy you see quoted everywhere which are written right to left. If you're into analogies it's like the more like a fully qualified domain name (FQDN).CN, OU, DC are the distinguished names in the end strings of the LDAP connection server (DN, distinguished name)T
The java test class calls the LDAP server client information for addition, deletion, modification, and query, and the test class ldap
The user information configured by the client is called by the self-written java test class as follows:
Package com; import java. io. unsupportedEncodingException; import java. util. arrays; import java. util. hashtable; import javax. naming. context; import javax. naming. n
Ldap-series-1-chapter-3-Php-ldap
If you want the PHP with LDAP. You have to add the extension lib. (ldap.so)
Go to the install file of PHP.
$ cd/opt/php-5.4.5/ext/ldap/$/usr/local/bin/phpize$./configure--with-php-config=/usr/local/bin/php-config-- with-ldap=/usr/local/open
1. Install LDAP server and client, Migrationtools ToolkitYum Install -y openldap-servers openldap-clients migrationtools2. Set OPENLDAP Administrator passwordslappasswd123456 123456The encrypted password string is returned and the string is saved.{Ssha} Gpezywuxyejxetnjc7ukxydxoercf3hb3. Change the OPENLDAP configurationSee which files are installedRPM-QL OpenLDAPRPM-QL openldap-serversModify ConfigurationVim/etc/openldap/slapd.d/cn\=config\/olcdataba
Abstract: LDAP is a standard Lightweight Directory Access Protocol (Lightweight Directory Access Protocol). With LDAP, you can access
User Information for user authentication. Dominor5/6 supports standard LDAP v3 Directories
Service . This article describes how to use JNDI to access the Domino Directory and describes how to make full use of the existing Domino
The LDAP-Series-1-Chapter-3-PHP-LDAPIfyouwanttousePHPwithldap.Youhavetoaddtheextensionlib. (ldap. so) GototheinstallfileofPHP. $ cdoptphp-5.4.5extldap $ usrl LDAP-Series-1-Chapter-3-PHP-LDAP
If you want to use PHP with ldap. You have to add the extension lib. (
ArticleDirectory
Description
Latest file releases
From: http://forge.novell.com/modules/xfmod/project? Ldapcsharp Description
LDAP libraries for C # enables you to write applications that access, manage, and update information stored in Novell eDirectory or Other LDAP-aware directories.
These classes are based on the ietf ldap Java applic
LDAP Development Summary and ldap SummaryPreface
The requirement of a recent project is to read some data in the AD domain and save it to the database. Therefore, I have studied LDAP.
Thanks for the information provided at the following link:
http://wibiline.iteye.com/blog/1840739
http://aa00aa00.iteye.com/blog/1276936
http://www.cnblogs.com/forbreak/archive/201
Asp. NET connection to the LDAP databaseThe function of obtaining user information encapsulated in the DAL layerFind user information by user IDPublicdirectoryentry GetUser (string username){String path = system.configuration.configurationmanager.connectionstrings["path"]. ConnectionString;string pname = system.configuration.configurationmanager.connectionstrings["PName"]. ConnectionString;string pwd = system.configuration.configurationmanager.connect
dedicated SSO single-point login commercial software: Mainly SiteMinder of netgrity, which has been acquired by CA. Novell's ichain. RSA ClearTrust.2. Use the SSO Single Sign-On product provided by the portal product supplier, such as BEA's wles, IBM's Tivoli Access Manager, sun's Identity Server, and Oracle's OID.3. These commercial software is generally suitable for customers who have high requirements f
how PHP operates LDAP
2.1 How PHP connects and shuts down with LDAP
$ds =ldap_connect ("ServerName")
ServerName is the name of the LDAP server,
Cases:
$ds =ldap_connect ("10.31.172.30:1000")
The return value is: TRUE or False
Close connection
Ldap_close ($DS);
2.2 How to search for user information in PHP
$ds =ldap_connect ("10.31.172.30:1000");Connect to the
LDAP is a standard Lightweight Directory Access Protocol (Lightweight Directory Access Protocol). With LDAP, you can Access user information in the Directory for user authentication. DominoR5/6 supports standard LDAP v3 directory service. This article describes how to use JNDI to access the Domino Directory and describes how to make full use of the existing Domin
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.