LDAP- how to modify / create user with smart card?

Hello All,

Did the search, no returns, so here is my post.

I have a few websites, both PHP and Java mix, that allow a user to type in their username / password which after a successful bind allows them to do other operations: create, modify, delete users, which executes as them via their credentials.

What I need to do now is allow them to do the same thing, except the users coming to the website will only have their smart card (CAC) installed. So no more username / password.

So I need to be able to do run the same ldap modify commands in Java (I'm using JNDI) and in PHP, but only passing in the "certificate" instead of username / password to the same Java / PHP functions.

Any ideas?


PS - I might have to post this seperately in the PHP / JAVA forums respectively, let me know if I should.

SK