[Zope-PAS] Re: plonePAS and JAX-WS
On Aug 25, 2006, at 10:17 AM, Tres Seaver wrote: Zachery Bir wrote: On Aug 25, 2006, at 5:40 AM, Jens Vagelpohl wrote: On 25 Aug 2006, at 05:47, Serge Zagorac wrote: Hi All Is there any way or example how to configure plonePAS to consume a web service (in my case JAX-WS via SOAP ) in order to get user details? This won't be a configuration issue, it will be a coding issue. You don't mention specifically what consume a web service means, but you might be able to put together a Scriptable Multiplugin or write your own filesystem-based plugin to do the job. However, there is one big caveat. Making HTTP calls (or almost any other network request) out of Zope code during the execution of a web request is risky. The executing thread will wait until the external request has been answered, and if for whatever reason no answer is received it will hang forever. There are four threads available in a normal Zope configuration, the fourth time this happens your website will be unavailable and Zope must be restarted. A lot of care needs to be taken to ensure there are sensible timeouts on these external calls to prevent hangs. You can get around it, though, if you use something like Zasync. A bit heavy-handed, but it's there for ya. :^) You can't authenticate asynchronously -- the original request is stalled untill the out-of-process call returns, and there is no way to release the thread / connection pool it is using. Well, fine. Bring you reality into it. ;^) Zac ___ Zope-PAS mailing list Zope-PAS@zope.org http://mail.zope.org/mailman/listinfo/zope-pas
Re: [Zope-PAS] Domainauth
On Jun 22, 2006, at 3:25 AM, Janko Hauser wrote: Hello, I'm trying to setup a domain based authentication. The situation is, that there is already a cookie-based authentication. Additionally we want to enable a direct login for some specific domains. Is this at all possible? I added a Domain Auth Plugin and activated it as the authentication plugin. Then I changed the order for this interface, so that Domain Auth is on top. But a request from such a domain get's an unauthorized and is redirected to the normal login page. Is there something more needed? I tried with the exact IP and with an endswith match for the domain name. What do I miss? (It's been a long time since the DomainAuthHelper was created, forgive me if I'm slow) Are you using mod_rewrite by any chance? You may need to turn on X- Forwarded-For (I forget the exact header), since in the default case, REMOTE_HOST is usually the Apache instance in such a setup. Zac ___ Zope-PAS mailing list Zope-PAS@zope.org http://mail.zope.org/mailman/listinfo/zope-pas
[Zope-PAS] PluggableAuthService 1.1b2 released
I'm pleased to announce another beta release of PluggableAuthService. PluggableAuthService is a highly extensible replacement user folder for Zope 2. It can manage users, groups, roles, and properties. Summary PluggableAuthService is a highly extensible replacement user folder for Zope 2. It can manage arbitrary user, group, role, and property definitions with ease, and works best in very heterogeneous environments (users stored in MySQL, groups in LDAP, properties from the filesystem, c). For authentication, it supports HTTP Basic Auth, Cookie Auth, Domain Auth, and others, and can be extended to support just about any other mechanism. Changes in this version - Fixed a template bug in the plugin activation form. You can download the source in tarball or zip format from: http://www.zope.org/Members/urbanape/PluggableAuthService/PluggableAuthService-1.1b2/PluggableAuthService-1.1b2.tar.gz http://www.zope.org/Members/urbanape/PluggableAuthService/PluggableAuthService-1.1b2/PluggableAuthService-1.1b2.zip Thanks, Zachery Bir ___ Zope-PAS mailing list Zope-PAS@zope.org http://mail.zope.org/mailman/listinfo/zope-pas
[Zope-PAS] PluginRegistry needs the same work...
So, it looks like PluginRegistry (a product that PAS depends on) will need the same kinds of Interface adjustments to make it work in the bridged manner that PAS now has. I'll be working on this today, and hopefully cut a new release of PluginRegistry. Zac ___ Zope-PAS mailing list Zope-PAS@zope.org http://mail.zope.org/mailman/listinfo/zope-pas
