Hi,
I have found that this is a difficult question to search for. Possibly due to lack of understanding but...
I have a apache php front end running on linux. Some PHP requests are directed toward a windows machine running iis 7.5 and PHP.
I can set the aplication pool on IIS to override the default anonymous (IUSR/defaultapppool?) user so that a domain user processes the requests. This means all php in this app pool runs as a domain user. This is helpful but not perfect.
However i would like to know if it is possible for authentication against AD can go via this linux machine. That is can the php script on the IIS machine be executed on a per domain user basis? e.g.
Domain user logs on to linux machine and uses php ldap to authenticate. A form is submitted and recieved by a php script on windows IIS machine causing that script to be executed as the user that authenticated on the linux machine.
Let me know if this is nonsense.