Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:37545 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 78329 invoked from network); 8 May 2008 18:03:39 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 May 2008 18:03:39 -0000 Authentication-Results: pb1.pair.com smtp.mail=christopher.jones@oracle.com; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=christopher.jones@oracle.com; sender-id=unknown Received-SPF: error (pb1.pair.com: domain oracle.com from 141.146.126.228 cause and error) X-PHP-List-Original-Sender: christopher.jones@oracle.com X-Host-Fingerprint: 141.146.126.228 agminet01.oracle.com Linux 2.4/2.6 Received: from [141.146.126.228] ([141.146.126.228:31426] helo=agminet01.oracle.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 9C/08-34339-97043284 for ; Thu, 08 May 2008 14:03:38 -0400 Received: from rgmgw2.us.oracle.com (rgmgw2.us.oracle.com [138.1.186.111]) by agminet01.oracle.com (Switch-3.2.4/Switch-3.1.7) with ESMTP id m48I3XNj009526 for ; Thu, 8 May 2008 13:03:34 -0500 Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by rgmgw2.us.oracle.com (Switch-3.2.4/Switch-3.2.4) with ESMTP id m487a7dP017012 for ; Thu, 8 May 2008 12:03:32 -0600 Received: from dhcp-5op3-5op4-west-130-35-70-84.usdhcp.oraclecorp.com by acsmt354.oracle.com with ESMTP id 9524349751210269775; Thu, 08 May 2008 11:02:55 -0700 Message-ID: <48234048.4060708@oracle.com> Date: Thu, 08 May 2008 11:02:48 -0700 User-Agent: Thunderbird 2.0.0.14 (X11/20080505) MIME-Version: 1.0 To: internals@lists.php.net Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: AAAAAQAAAAI= X-Brightmail-Tracker: AAAAAQAAAAI= X-Whitelist: TRUE X-Whitelist: TRUE Subject: Supporting External Authentication in the Oracle OCI8 Extension From: christopher.jones@oracle.com (Christopher Jones) I've had a couple of recent requests for the OCI8 extension to support "External Authentication" (aka OS authentication). I also recall a discussion or two in the past, and there is at least one bug logged on it. Having external authentication would allow things like Kerberos to be used for OCI8 authentication. This need is clearly growing but I'm not in favor of having it always enabled in every web environment - I feel another php.ini parameter looming :( If anyone wants to be throw in some comments or help me re-evaluate the pros and cons, drop me a line. Some Oracle documentation discussing External Authentication is in: http://download.oracle.com/docs/cd/B28359_01/network.111/b28531/authentication.htm#CHDEGIFB Chris -- Christopher Jones, Oracle Email: christopher.jones@oracle.com Tel: +1 650 506 8630 Blog: http://blogs.oracle.com/opal/ Free PHP Book: http://tinyurl.com/f8jad