[Product-Developers] Authentication plugin with three parameters

2011-02-11 Thread Andrea Brugiolo
I am writing an authentication plugin against a web service that is a back end for my Plone site. I am following this example http://plone.org/documentation/kb/simple-plonepas-example and looking at the PluggableAuthService plugins code. It is almost working. The fact is I need also a namespace

Re: [Product-Developers] Authentication plugin with three parameters

2011-02-16 Thread Andrea Brugiolo
-- Andrea Brugiolo andrea.brugi...@unipd.it Universita` degli Studi di Padovahttp://www.unipd.it Centro di Ateneo per le Biblioteche http://www.cab.unipd.it tel +39-049-827-3688 fax +39-049-827-3651

[Product-Developers] Triggering logout (was: Re: Authentication plugin with three parameters)

2011-02-17 Thread Andrea Brugiolo
On Tue, Feb 15, 2011 at 05:39:00PM +0100, Maurits van Rees wrote: I have recently released this PAS plugin that also has extraction and authentication; maybe its code has some hints for you: http://pypi.python.org/pypi/pas.plugins.aselect (also on the collective) Thank you for your

[Product-Developers] Retrieve external users credentials

2011-02-25 Thread Andrea Brugiolo
I wrote a plugin to authenticate users against an external source and now it works -- thanks to those who helped :-) Now I have to get a user's password to let Plone ask for some external resources on behalf of the user. Starting from Plone 3, the __ac cookie doesn't store the user's password

Re: [Product-Developers] [SOLVED] Retrieve external users credentials

2011-03-01 Thread Andrea Brugiolo
On Mon, Feb 28, 2011 at 12:52:12PM +0200, Vitaliy Podoba wrote: Plone doesn't store plain passwords in database. It stores it in a hashed form. That's why the only way for user that forgot his password is to reset it and pick a new one. I think you'll need to write one more PAS plugin that

Re: [Product-Developers] Retrieve external users credentials

2011-03-02 Thread Andrea Brugiolo
On Wed, Mar 02, 2011 at 02:28:11AM -0800, toutpt wrote: storing plain-text password is a security issue by design. I agree with you, of course. I need to update it but I have done sth similar in collective.sugarcrm. The authentication should be done on the external services, and you are

Re: [Product-Developers] [SOLVED] Retrieve external users credentials

2011-03-02 Thread Andrea Brugiolo
On Tue, Mar 01, 2011 at 10:16:13AM -0800, Mikko Ohtamaa wrote: Hi, Hi Mikko This would be a great chance to write down some notes regarding this to here http://collective-docs.plone.org/members/pluggable_authentication_service/index.html or here