We are using Kerberos based on Apache mod_auth_kerb.so with php-fpm as PHP Backend 1:1 like with mod_php.
There is no difference and of course php-fpm knows about Apache Environment. No change for ILIAS/Code required. We simply secure access via to ilias/sso/ Directory, and customize /ilias/Services/AuthApache/classes/custom_username_func.php if we use i.e. samaccountname instead of UserPrincipal Name in AD or a login which is a "substring" of REMOTE_USER.
Please secure a directory on your webserver via Kerberos an put simply a phpinfo.php there and Request it via Kerberos-enabled browser. You'll find authentication data in the output !
<?php
phpinfo();
?>
There is no difference and of course php-fpm knows about Apache Environment. No change for ILIAS/Code required. We simply secure access via to ilias/sso/ Directory, and customize /ilias/Services/AuthApache/classes/custom_username_func.php if we use i.e. samaccountname instead of UserPrincipal Name in AD or a login which is a "substring" of REMOTE_USER.
Please secure a directory on your webserver via Kerberos an put simply a phpinfo.php there and Request it via Kerberos-enabled browser. You'll find authentication data in the output !
<?php
phpinfo();
?>