Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
Maciej Wisniowski escribió: I'd like to see a plugin that stores that information in a session, that way the plugin could be used with zc.winauth or any other credential mechanism. I know nothing about PAU architecture... yet ;) If you, or some other PAU experts, could give some suggestions how to wire such a thing with zc.winauth and PAU, I would be grateful You may want to take a look at CAS plugin for PAS in Zope2 (I think PAS is similiar to PAU) or maybe there already is CAS plugin for PAU. CAS plugin, after initial authentication in external server, stores this information in session so further requests don't have to create any background connections. Pozdrowienia ;) I digged through google and found many things called CAS or similar... did you mean this: http://www.zope.org/Members/mrlex/ACUF ? Alek ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
I digged through google and found many things called CAS or similar... did you mean this: http://www.zope.org/Members/mrlex/ACUF ? I meant http://www.zope.org/Members/regebro/CAS4PAS. It's Zope2 stuff, but may be somewhat helpful because it's a plugin for PAS (pluggable authentication services) which (I think) is similiar to PAU in Zope3. In general you should take a look at Readme and interfaces.py in PAU directory. HTH -- Maciej Wisniowski ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
I'd like to see a plugin that stores that information in a session, that way the plugin could be used with zc.winauth or any other credential mechanism. I know nothing about PAU architecture... yet ;) If you, or some other PAU experts, could give some suggestions how to wire such a thing with zc.winauth and PAU, I would be grateful You may want to take a look at CAS plugin for PAS in Zope2 (I think PAS is similiar to PAU) or maybe there already is CAS plugin for PAU. CAS plugin, after initial authentication in external server, stores this information in session so further requests don't have to create any background connections. Pozdrowienia ;) -- Maciej Wisniowski ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
[Zope3-Users] zc.winauth takes too much time to authenticate every page load
Hello, I am playing with zc.winauth authentication in my corporate intranet. It works great, but I have one issue: authentication takes much time (almost 10 seconds). This wouldn't be problem, but authentication is done not only on login, but repeated for every HTTP GET. This means that every page load takes at least 10 seconds when ActiveDirectory-authenticated user is logged in. See log below for example. IMHO sane behavior would be: authenticate with ActiveDirectory once (on login) and then authenticate basing only on cookie, which should be quick. Am I right? I suspect my problem may be a configuration issue in my PAU (for example: wrong order of plugins). Could you help me how to configure PAU (or suggest how to modify zc.winauth) to resolve this problem? 127.0.0.1 - - [12/Oct/2006:08:52:58 +0200] GET / HTTP/1.1 200 4658 http://localhost:8080/; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727) -- 2006-10-12T08:52:58 INFO root Begining authentication for . -- 2006-10-12T08:52:58 INFO root Authenticating credentials for . -- 2006-10-12T08:52:58 INFO root Done authenticating credentials for . -- 2006-10-12T08:53:05 INFO root Done with authentication for . Best Regards! Alek. ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
[EMAIL PROTECTED] wrote: It works great, but I have one issue: authentication takes much time (almost 10 seconds). Windows authentication can be slow. There are ways to speed it up, the Microsoft documentation might help. IMHO sane behavior would be: authenticate with ActiveDirectory once (on login) and then authenticate basing only on cookie It depends on what you want. If you want immediate revocation, then it's not. If, like most people, you don't care too much about immediate revocations, then read below. I suspect my problem may be a configuration issue in my PAU It sounds like it; make sure you have the No Challenge if Authenticated plugin enabled. -- Benji York Senior Software Engineer Zope Corporation ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
Benji York wrote: [a mixture of truth and pre-caffeine insanity] [EMAIL PROTECTED] wrote: I suspect my problem may be a configuration issue in my PAU It sounds like it; make sure you have the No Challenge if Authenticated plugin enabled. My suggestion above makes no sense at all. :) Two things: I like your original idea of finding a way to cache the fact that a user is authenticated. I'd like to see a plugin that stores that information in a session, that way the plugin could be used with zc.winauth or any other credential mechanism. Per your performance problems: we have used zc.winath in a pretty heavily-loaded environment with a user-store of more than 5,000 entries. Unless you have massively more users than that, I would think you should be able to get decent performance. We had some similar performance problems and I was able to re-configure the server on-which Zope was running such that the authentication was much faster. I wish I remembered the details, hopefully Google and MSDN will be helpful. -- Benji York Senior Software Engineer Zope Corporation ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] zc.winauth takes too much time to authenticate every page load
Benji York escribió: Benji York wrote: [a mixture of truth and pre-caffeine insanity] [EMAIL PROTECTED] wrote: I suspect my problem may be a configuration issue in my PAU It sounds like it; make sure you have the No Challenge if Authenticated plugin enabled. My suggestion above makes no sense at all. :) :) I already tried with No Challenge if Authenticated but nothing changed, still asks AD on every GET. I like your original idea of finding a way to cache the fact that a user is authenticated. I'd like to see a plugin that stores that information in a session, that way the plugin could be used with zc.winauth or any other credential mechanism. I know nothing about PAU architecture... yet ;) If you, or some other PAU experts, could give some suggestions how to wire such a thing with zc.winauth and PAU, I would be grateful We had some similar performance problems and I was able to re-configure the server on-which Zope was running such that the authentication was much faster. I wish I remembered the details, hopefully Google and MSDN will be helpful. Even if I could be able to reduce auth time to, say, one second, I'm afraid there still might be a problem with pages having more rich content - GET of every picture will be authenticated, so it still may be too much lag... but I'll try. Thanks ! Alek ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
