[Zope-dev] Re: [Zope-Annce] jcNTUserFolder 0.2.1 released

2001-12-03 Thread Jephte CLAIN
"Jay, Dylan" wrote: > There has to be some way round that. Is the REMOTE_USER variable still pased > in even if zope isn't in remote user mode? Couldn't a user folder be > implemented to use it? nope. REMOTE_USER is passed when the web server (IIS in our case) has done the *authentication* and sai

[Zope-dev] RE: [Zope-Annce] jcNTUserFolder 0.2.1 released

2001-12-03 Thread Jay, Dylan
> -Original Message- > From: Jephte CLAIN [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, 4 December 2001 5:51 PM > To: Jay, Dylan > Cc: [EMAIL PROTECTED] > Subject: Re: [Zope-Annce] jcNTUserFolder 0.2.1 released > > > "Jay, Dylan" wrote: > > One way is to not replicate the challenge-respons

[Zope-dev] Re: [Zope-Annce] jcNTUserFolder 0.2.1 released

2001-12-03 Thread Jephte CLAIN
"Jay, Dylan" wrote: > One way is to not replicate the challenge-response functionatlity at all. this is the solution i have opted for. it has run now for two years :-) the problem is Zope cannot be in remote user mode and in normal mode at the same time. I think that setting up a zeo cluster (one

[Zope-dev] RE: [Zope-Annce] jcNTUserFolder 0.2.1 released

2001-12-03 Thread Jay, Dylan
One way is to not replicate the challenge-response functionatlity at all. Put Zope behind IIS in two spots. One which is protected and thus elicits a challenge/response and another that has IIS anoymous access on it. Then get the zope security machinery to alternate between the two urls depending

[Zope-dev] Re: [Zope-Annce] jcNTUserFolder 0.2.1 released

2001-12-03 Thread Jephte CLAIN
"Jay, Dylan" wrote: > Can I ask you a question? Something I;ve tried to do in the past with > jcNTUserFolder (maybe not tried hard enough) is this. I want all my users to > be authenticated via challenge-response mechanism such that no one has to > enter a username or password. > >From what I can