title: Kerberos Authentication in PHP
body: <p>Let's just assume that I don't know much about Kerberos - just the basics.</p>
  
  <p>I have...</p>
  
  <ul>
  <li>Debian Linux 2.6 Webserver
  
  <ul>
  <li>Apache 2.2
  
  <ul>
  <li>mod_auth_kerb/5.3 </li>
  <li>PHP/5.2</li>
  </ul></li>
  </ul></li>
  <li>a (working) Kerberos Realm</li>
  <li>Windows Client
  
  <ul>
  <li>Firefox 3</li>
  <li>an logged in identity "user@EXAMPLE.COM" in MIT Network Identity Manager</li>
  </ul></li>
  </ul>
  
  <p>How do I use this information in a PHP script so that I don't need to log in to the website if the visitor has a kerberos ticket like that? I don't want Apache to handle the authentication. I need to find out which user is accessing the site via PHP.</p>
  
  <p>Is that possible? If so: How?</p>
  
  <p>What I have found out so far: I have to <a href="http://grolmsnet.de/kerbtut/firefox.html" rel="noreferrer">"enable" the domain in Firefox</a>. </p>
  
  <p>However that's about it...</p>