views:

45

answers:

0

Hi,

I am developing a PHP Application on Linux server. my application user are stored in LDAP Directory with their domain logins.

Now, what i need to do is to give them SSO, attached with there domain credential so when a user logs in to the domain they will not be asked to provide their loginname and password.

To do this, I have implemented OpenSSL and its working fine, but I have to create individual certificate for every user and the certificate is also not bind to the domain.

My question is that how can generate a client (PKCS12) certificate bind with the domain and which will dynamically read the domain credential and send the final certificate to server for authentication?

Regards,