Replacing nusoap and curl using NTLM auth for sugar 12.0.3

Hi Stijn Vermeulen,

Yes, we did remove Nusoap and advise everyone against using it. I'm assuming your NTLM auth is a custom code you need to rewrite for 13.0 is that correct? I would advise you to look into our native LDAP integration, if you are in SugarCloud, we have a few more options with SugarIdentity. If you need really need to rewrite your code, you could look into PHP's native SoapClient (I don't believe we have a Sugarcrm\SoapClient we support at this point).

You can create a client like:

$this->client = new \SoapClient(<your soap server> . '?wsdl', $params);

For cURL, you have to replace it with ExternalResourceClient.

Hi Rafael Fernandes

I have discussed this with our admins, but we are not entirely sure how the LDAP integration would work. As far as we are aware, LDAP might work for incoming requests, but not for outgoing requests, right?

According to the system admin their server also supports Kerberos authentication, but I think this is also not supported by the ExternalResourceClient and requires me to use cURL for my requests?

Regards,

Stijn

Hi Rafael Fernandes

I have discussed this with our admins, but we are not entirely sure how the LDAP integration would work. As far as we are aware, LDAP might work for incoming requests, but not for outgoing requests, right?

According to the system admin their server also supports Kerberos authentication, but I think this is also not supported by the ExternalResourceClient and requires me to use cURL for my requests?

Regards,

Stijn

Hi Stijn Vermeulen,

ExternalResourceClient is our HTTP client, it is equivalent to cURL for Sugar, it doesn't have any logic in it other than dealing with HTTP transport, whatever you need to do in cURL, use ExternalResourceClient instead.

You can configure your Active Directory to accept LDAP authentication, so Sugar will use that connection to authenticate its users against. In fact, it will always be "outbound requests" as Sugar goes to LDAP and tried to authenticate (username+password) and LDAP provides a handshake with OK/NOK for those credentials..

Perhaps you can explain better what you're trying to achieve so we can better assist you!?