Re: [Zope3-Users] How to get PAU working?

2007-01-09 Thread FB
Hi,

On Mon, Jan 08, 2007 at 02:38:30AM -0500, Stephan Richter wrote:
 On Wednesday 20 December 2006 01:45, FB wrote:
  Once the PAU is registered, the default IAuthentication utility which
  provides all the zcml-predefined principals becomes invisible (speak:
  useless). This means, you don't have a manager any more and you're unable
  to unregister the PAU again.
 
 Huh? I have never experienced this. We are using local authentication 
 utilities, but I always test with the globally defined manager (if I am not 
 interested in checking security).

Hmm ... I've had this problem multiple times. Whenever the Pau was
registered and wasn't able to authenticate a manager, I had to use 'zopectl
debug' and unregister the pau manually to get manager access again.

This seemed to be ok, because a registered local pau overrides the global
IAuthentication utility.

Regards,

Frank
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


Re: [Zope3-Users] How to get PAU working?

2007-01-09 Thread Stephan Richter
On Tuesday 09 January 2007 04:56, FB wrote:
 This seemed to be ok, because a registered local pau overrides the global
 IAuthentication utility.

But it is the local IAuthentication utility's responsibility to delegate the 
request to the next utility higher up, if it cannot give an answer.

Regards,
Stephan
-- 
Stephan Richter
CBU Physics  Chemistry (B.S.) / Tufts Physics (Ph.D. student)
Web2k - Web Software Design, Development and Training
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


Re: [Zope3-Users] How to get PAU working?

2007-01-09 Thread FB
Hi,

On Tue, Jan 09, 2007 at 07:47:23AM -0500, Stephan Richter wrote:
 On Tuesday 09 January 2007 04:56, FB wrote:
  This seemed to be ok, because a registered local pau overrides the global
  IAuthentication utility.
 
 But it is the local IAuthentication utility's responsibility to delegate the 
 request to the next utility higher up, if it cannot give an answer.

Some of Pau's methods (e.g. 'getPrincipal' ) seem to take the higher utility
into account but 'authenticate' doesn't.

Regards,

Frank
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


Re: [Zope3-Users] How to get PAU working?

2007-01-08 Thread Stephan Richter
On Tuesday 19 December 2006 17:26, Jonas Jarutis wrote:
 I'm trying to set up a user folder for my site, but i cant get the PAU to
 work. I add the Pluggable Authentication Utility object, register it, add
 PrincipalFolder and SessionCredentials plugins and register them. Add a
 user in the Principal folder. But then i try to login, i just get
 redirected to the same login form and nothing happens.
 What else do i need to do?

You also have to grant the new principal some permissions, so he can do 
something.

Regards,
Stephan
-- 
Stephan Richter
CBU Physics  Chemistry (B.S.) / Tufts Physics (Ph.D. student)
Web2k - Web Software Design, Development and Training
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


Re: [Zope3-Users] How to get PAU working?

2007-01-08 Thread Stephan Richter
On Wednesday 20 December 2006 01:45, FB wrote:
 Once the PAU is registered, the default IAuthentication utility which
 provides all the zcml-predefined principals becomes invisible (speak:
 useless). This means, you don't have a manager any more and you're unable
 to unregister the PAU again.

Huh? I have never experienced this. We are using local authentication 
utilities, but I always test with the globally defined manager (if I am not 
interested in checking security).

Regards,
Stephan
-- 
Stephan Richter
CBU Physics  Chemistry (B.S.) / Tufts Physics (Ph.D. student)
Web2k - Web Software Design, Development and Training
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


[Zope3-Users] How to get PAU working?

2006-12-19 Thread Jonas Jarutis

Hi,

I'm trying to set up a user folder for my site, but i cant get the PAU to work.
I add the Pluggable Authentication Utility object, register it, add
PrincipalFolder and SessionCredentials plugins and register them. Add
a user in the Principal folder. But then i try to login, i just get
redirected to the same login form and nothing happens.
What else do i need to do?

Thanks in advance
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users


Re: [Zope3-Users] How to get PAU working?

2006-12-19 Thread FB
Hi,

On Wed, Dec 20, 2006 at 12:26:55AM +0200, Jonas Jarutis wrote:
 Hi,
 
 I'm trying to set up a user folder for my site, but i cant get the PAU to 
 work.
 I add the Pluggable Authentication Utility object, register it, add
 PrincipalFolder and SessionCredentials plugins and register them. Add
 a user in the Principal folder. But then i try to login, i just get
 redirected to the same login form and nothing happens.
 What else do i need to do?

This is what has to be done (in the right order!):
   1. Add a PAU
   2. Make sure, the PAU knows some users - e.g. this way:
  1.Add a principalfolder
  2.Add a principal into the folder
  3.Configure the PAU to use the principalfolder
   3. Make sure, the PAU is able to extract the credentials correctly
  (Session-Credentials are usefull for that)
   4. Register the PAU

Once the PAU is registered, the default IAuthentication utility which provides 
all the 
zcml-predefined principals becomes invisible (speak: useless). This means, 
you don't
have a manager any more and you're unable to unregister the PAU again.

For that reason, I wrote a Auth-Plugin which is like a principalfolder but all 
principals
defined there are managers.

However: I wrote a Mini-Howto on how to remove the registration of a PAU 
manually.
 Unfortunately it's in german:
 
http://zope3.mpg.de/cgi-bin/twiki/view/Zope/ZodbMagic#RemoveRegistration

- Please correct me if I'm wrong.

Regards,

Frank
___
Zope3-users mailing list
Zope3-users@zope.org
http://mail.zope.org/mailman/listinfo/zope3-users