How can I transfer a logged in user's login data from one server to another?
- by Martin
I have one server "A" where users can login. Login is verified by an LDAP server "L".
I have a different server "B" were users can log in, too. Login is verified by the same LDAP server as before. Both servers are standard web servers with PHP.
My goal is: If a user is logged in to server "A", and if he clicks a link to log in to server "B", the user should automatically be logged in without re-entering username and password. What is a good and secure way to achieve this? I can't submit username and crypted password to server "B". I can't use the PHP session of server "A", because it does not exit on "B". Cookies won't work either.
I think that there is a way, but I just can't see it. Any help is very much appreciated.