Re: [Zope-PAS] Re: Authenticator for NT

2005-07-15 Thread Jens Vagelpohl
So the trick will be to locate and resurrect that sample, then plug  
in the
NTLM functions.  As mentioned above, I haven't bothered trying to  
keep it up

to date as to my knowledge no one has ever even looked at it.


*If and only if* you happen to run on Windoze :)  Ah well. It was  
worth a try.


jens

___
Zope-PAS mailing list
Zope-PAS@zope.org
http://mail.zope.org/mailman/listinfo/zope-pas


RE: [Zope-PAS] Re: Authenticator for NT

2005-07-15 Thread Mark Hammond
> | Sidnei, are you guys going to release those plugins (including the
> | NTLM ones) or is that all for-pay?
>
> Right now it's all for-pay. That might change in the future.

All the bits are there for people to roll their own NTLM plugin.
Specifically:
* Many months ago I released a "sample" challenge plugin that struggled with
the exact issues NTLM faced.  Sadly that sample was never referenced nor
mentioned in reply, so I gave up on it.

* Since that time, the Windows SSPI functions (the guts of Windows NTLM) is
in the pywin32 package.  It should be fully functional in the version
shipping with recent Zopes.  There are samples that demonstrate how to do
NTLM auth in a "test" environment.

So the trick will be to locate and resurrect that sample, then plug in the
NTLM functions.  As mentioned above, I haven't bothered trying to keep it up
to date as to my knowledge no one has ever even looked at it.

Mark

___
Zope-PAS mailing list
Zope-PAS@zope.org
http://mail.zope.org/mailman/listinfo/zope-pas


Re: [Zope-PAS] Re: Authenticator for NT

2005-07-14 Thread Sidnei da Silva
On Thu, Jul 14, 2005 at 09:23:55AM +0100, Jens Vagelpohl wrote:
| 
| >Like Chris said, the 'ActiveDirectory Multi Plugin' should be able to
| >authenticate against 'Active Directory' *wink*. If your Zope server  
| >happens to
| >be running on Windows and the machine is part of a Windows Domain,  
| >we've just
| >got a ADSI plugin based on 'ActiveDirectory Multi Plugin' that  
| >should make
| >things a lot easier to configure. We also have NTLM challenge,  
| >extraction and
| >authorization working which means *real* single sign-on.
| 
| Sidnei, are you guys going to release those plugins (including the  
| NTLM ones) or is that all for-pay?

Right now it's all for-pay. That might change in the future.

-- 
Sidnei da Silva
Enfold Systems, LLC.
http://enfoldsystems.com
___
Zope-PAS mailing list
Zope-PAS@zope.org
http://mail.zope.org/mailman/listinfo/zope-pas


Re: [Zope-PAS] Re: Authenticator for NT

2005-07-14 Thread Jens Vagelpohl


On 14 Jul 2005, at 05:09, Sidnei da Silva wrote:


Luis Flavio Rocha <[EMAIL PROTECTED]> writes:


Hi,

I'm new to PAS and would like to know if there is an authenticator to
NT Domains.



Like Chris said, the 'ActiveDirectory Multi Plugin' should be able to
authenticate against 'Active Directory' *wink*. If your Zope server  
happens to
be running on Windows and the machine is part of a Windows Domain,  
we've just
got a ADSI plugin based on 'ActiveDirectory Multi Plugin' that  
should make
things a lot easier to configure. We also have NTLM challenge,  
extraction and

authorization working which means *real* single sign-on.


Sidnei, are you guys going to release those plugins (including the  
NTLM ones) or is that all for-pay?


jens

___
Zope-PAS mailing list
Zope-PAS@zope.org
http://mail.zope.org/mailman/listinfo/zope-pas