Plone from version 2.5 uses PAS PluggableAuthenticationService. IIRC you
give the plugins an order, so if the shibboleth plugin comes before the
cookie auth plugin then it will `win`.
See: http://plone.org/documentation/manual/pas-reference-manual/
Laurence
Alex Man wrote:
Hi,
My apologies if this isn't the correct mailing list I should post this
question to. Please let me know if I should post on another list.
I'm using Shibboleth as the authentication system in Plone and is
wondering how Zope knows the name of the session cookie it should refer to.
First of all, the software I'm using:
* Zope 2.9.8
* Plone 2.5.5
* Apache 2.2.6
* apachepas 1.2
* ShibbolethLogin 0.6
If a user logs into Plone through the local Plone user account, the
session cookie Plone refers to is
*__ac
*If a user logs into Plone through Shibboleth, the session cookie Plone
refers to is
*_shibsession_XXX
*where XXX is a 40-character alphanumeric sequence.
I'm sure something must have told Zope/Plone to refer to the
_shibsession_XXX cookie instead __ac and I'm wondering how that is done.
Does anyone have any idea/hint on this? I'd appreciate any kind of help.
Thanks a lot!
Regards,
Alex
------------------------------------------------------------------------
_______________________________________________
Zope-CMF maillist - Zope-CMF@lists.zope.org
http://mail.zope.org/mailman/listinfo/zope-cmf
See http://collector.zope.org/CMF for bug reports and feature requests
_______________________________________________
Zope-CMF maillist - Zope-CMF@lists.zope.org
http://mail.zope.org/mailman/listinfo/zope-cmf
See http://collector.zope.org/CMF for bug reports and feature requests
