Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-19 Thread Simon Hang
Good news. I believe I found a way to do NTLM 4-way handshake with zope3 and using PAU's plugin. But I need to modify zope3's http server a little bit, to let zope3 support HTTP/1.1 persistent connection. Currently I can 1. send NTLM challenge 2. receive NTLM type-1 message 3. send NTLM type-2

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-14 Thread Chris Withers
Gary Poster wrote: http://www.innovation.ch/personal/ronald/ntlm.html), the problem is that the 4 way handshake has to happen *within a single connection*. Apparently MS abuses HTTP to perform this. Hmmm, I'm not sure this is true. One project I work on has 10,000+ users a day

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-14 Thread Chris Withers
Chris McDonough wrote: The right thing to do here is probably to just use something like http://modntlm.sourceforge.net/ and trust the REMOTE_USER environment variable passed by Apache... let somebody else worry about maintaining it. ;-) 'cept it don't work ;-) (well, not in the

[Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Philipp von Weitershausen
Martijn Pieters wrote: On 9/13/06, Simon Hang [EMAIL PROTECTED] wrote: I'm thinging to write a NTLM credential plugin for zope3. But as I know, ntlm use 4-way handshake procedure, that means it needs two round-trips between server(zope3) and client(browser). Have you looked at Zope Corp's

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Martijn Pieters
On 9/13/06, Philipp von Weitershausen [EMAIL PROTECTED] wrote: That's an authenticator plug-in to talk to the Windows directory service, so that users can log into Zope using their Windows logins. Which tells you how much *I* looked at it. ;) The original thread announcing zc.winauth mentioned

[Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Philipp von Weitershausen
Simon Hang wrote: Hi, I'm thinging to write a NTLM credential plugin for zope3. But as I know, ntlm use 4-way handshake procedure, that means it needs two round-trips between server(zope3) and client(browser). When I look in the credential plugins, it has challenge mothed. But seems it is

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Gary Poster
On Sep 13, 2006, at 2:30 AM, Philipp von Weitershausen wrote: Simon Hang wrote: Hi, I'm thinging to write a NTLM credential plugin for zope3. But as I know, ntlm use 4-way handshake procedure, that means it needs two round-trips between server(zope3) and client(browser). When I look in

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Philipp von Weitershausen
Gary Poster wrote: On Sep 13, 2006, at 2:30 AM, Philipp von Weitershausen wrote: Simon Hang wrote: Hi, I'm thinging to write a NTLM credential plugin for zope3. But as I know, ntlm use 4-way handshake procedure, that means it needs two round-trips between server(zope3) and

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Chris McDonough
The right thing to do here is probably to just use something like http://modntlm.sourceforge.net/ and trust the REMOTE_USER environment variable passed by Apache... let somebody else worry about maintaining it. ;-) One strategy for doing this is described at

Re: [Zope3-Users] Re: NTLM credential plugin

2006-09-13 Thread Gary Poster
On Sep 13, 2006, at 11:47 AM, Chris McDonough wrote: The right thing to do here is probably to just use something like http://modntlm.sourceforge.net/ and trust the REMOTE_USER environment variable passed by Apache... let somebody else worry about maintaining it. ;-) One strategy for