Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-08 Thread Dieter Maurer
mark hellewell wrote at 2005-5-7 20:22 +0100: >On 5/7/05, Chris McDonough <[EMAIL PROTECTED]> wrote: >> Web Folders pass cookies around too, FWIW, so it's probably not strictly >> necessary to use http basic auth. But without using http basic auth, >> there is no way to log in unless you have them

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread mark hellewell
On 5/7/05, Tino Wildenhain <[EMAIL PROTECTED]> wrote: > Well, in theory its possible if the client accepts cookie to just > store the amount of wrong attempts via cookie (or id - which would > be the same) and deny any password, be it even the correct one > when it comes via basic auth. Store the

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread mark hellewell
On 5/7/05, Chris McDonough <[EMAIL PROTECTED]> wrote: > Web Folders pass cookies around too, FWIW, so it's probably not strictly > necessary to use http basic auth. But without using http basic auth, > there is no way to log in unless you have them go to the web interface > first, then launch a we

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Tino Wildenhain
Am Samstag, den 07.05.2005, 12:04 -0400 schrieb Chris McDonough: > Web Folders pass cookies around too, FWIW, so it's probably not strictly > necessary to use http basic auth. But without using http basic auth, > there is no way to log in unless you have them go to the web interface > first, then

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Chris McDonough
Web Folders pass cookies around too, FWIW, so it's probably not strictly necessary to use http basic auth. But without using http basic auth, there is no way to log in unless you have them go to the web interface first, then launch a web folder, so maybe impractical. - C On Sat, 2005-05-07 at 0

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Jens Vagelpohl
On May 6, 2005, at 23:52 , mark hellewell wrote: On 5/6/05, Tino Wildenhain <[EMAIL PROTECTED]> wrote: Actually, it does not. You have no such thing like a session when all you have is webdav. I dont know if many dav-clients store cookies too - it may depend on your usecase. Yes the use-case is Win

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread mark hellewell
On 5/6/05, Tino Wildenhain <[EMAIL PROTECTED]> wrote: > Actually, it does not. You have no such thing like a session > when all you have is webdav. I dont know if many dav-clients > store cookies too - it may depend on your usecase. Yes the use-case is Windows Explorer users only. > Without cooki

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread Tino Wildenhain
Am Freitag, den 06.05.2005, 19:26 +0100 schrieb mark hellewell: > On 5/6/05, Dieter Maurer <[EMAIL PROTECTED]> wrote: > > > WebDAV uses "basic HTTP authentication" which should use whatever > > UserFolder you have installed. > > Thanks.. So, I think I should be able to modify the authentication p

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread mark hellewell
On 5/6/05, Dieter Maurer <[EMAIL PROTECTED]> wrote: > WebDAV uses "basic HTTP authentication" which should use whatever > UserFolder you have installed. Thanks.. So, I think I should be able to modify the authentication plugin of PUF so that each time a user makes a bad login attempt (either via

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread Dieter Maurer
mark hellewell wrote at 2005-5-6 14:44 +0100: >I have a site that uses PluggableUserFolders for its acl_users. >The web-based portion of the login process locks out a user >after 3 unsuccessfull attempts at the password and i'd like to be >able to do something similar for users who try to connect >

[Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread mark hellewell
Hello! I'd like a little help, please :) I have a site that uses PluggableUserFolders for its acl_users. The web-based portion of the login process locks out a user after 3 unsuccessfull attempts at the password and i'd like to be able to do something similar for users who try to connect via WebD