Re: [Zope3-Users] How to get PAU working?
Hi, On Tue, Jan 09, 2007 at 07:47:23AM -0500, Stephan Richter wrote: > On Tuesday 09 January 2007 04:56, FB wrote: > > This seemed to be ok, because a registered local pau overrides the global > > IAuthentication utility. > > But it is the local IAuthentication utility's responsibility to delegate the > request to the next utility higher up, if it cannot give an answer. Some of Pau's methods (e.g. 'getPrincipal' ) seem to take the higher utility into account but 'authenticate' doesn't. Regards, Frank ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
On Tuesday 09 January 2007 04:56, FB wrote: > This seemed to be ok, because a registered local pau overrides the global > IAuthentication utility. But it is the local IAuthentication utility's responsibility to delegate the request to the next utility higher up, if it cannot give an answer. Regards, Stephan -- Stephan Richter CBU Physics & Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
Hi, On Mon, Jan 08, 2007 at 02:38:30AM -0500, Stephan Richter wrote: > On Wednesday 20 December 2006 01:45, FB wrote: > > Once the PAU is registered, the default IAuthentication utility which > > provides all the zcml-predefined principals becomes invisible (speak: > > "useless"). This means, you don't have a manager any more and you're unable > > to unregister the PAU again. > > Huh? I have never experienced this. We are using local authentication > utilities, but I always test with the globally defined manager (if I am not > interested in checking security). Hmm ... I've had this problem multiple times. Whenever the Pau was registered and wasn't able to authenticate a manager, I had to use 'zopectl debug' and unregister the pau manually to get manager access again. This seemed to be ok, because a registered local pau overrides the global IAuthentication utility. Regards, Frank ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
On Wednesday 20 December 2006 01:45, FB wrote: > Once the PAU is registered, the default IAuthentication utility which > provides all the zcml-predefined principals becomes invisible (speak: > "useless"). This means, you don't have a manager any more and you're unable > to unregister the PAU again. Huh? I have never experienced this. We are using local authentication utilities, but I always test with the globally defined manager (if I am not interested in checking security). Regards, Stephan -- Stephan Richter CBU Physics & Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
On Tuesday 19 December 2006 17:26, Jonas Jarutis wrote: > I'm trying to set up a user folder for my site, but i cant get the PAU to > work. I add the Pluggable Authentication Utility object, register it, add > PrincipalFolder and SessionCredentials plugins and register them. Add a > user in the Principal folder. But then i try to login, i just get > redirected to the same login form and nothing happens. > What else do i need to do? You also have to grant the new principal some permissions, so he can do something. Regards, Stephan -- Stephan Richter CBU Physics & Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
I also had similar problems and added a question to the faq: http://wiki.zope.org/zope3/FAQ#having-defined-and-registered-a-pau-in-the-root-of-the-site-i-cannot-log-in-as-a-user-with-zope-manager-permission-anymore-help Having read FB's description, I now understand that the text is wrong, but the method is ok to remove the IAuthentication utility. I will correct the text description tomorrow. Joe FB wrote: Hi, On Wed, Dec 20, 2006 at 12:26:55AM +0200, Jonas Jarutis wrote: Hi, I'm trying to set up a user folder for my site, but i cant get the PAU to work. I add the Pluggable Authentication Utility object, register it, add PrincipalFolder and SessionCredentials plugins and register them. Add a user in the Principal folder. But then i try to login, i just get redirected to the same login form and nothing happens. What else do i need to do? This is what has to be done (in the right order!): 1. Add a PAU 2. Make sure, the PAU knows some users - e.g. this way: 1.Add a principalfolder 2.Add a principal into the folder 3.Configure the PAU to use the principalfolder 3. Make sure, the PAU is able to extract the credentials correctly (Session-Credentials are usefull for that) 4. Register the PAU Once the PAU is registered, the default IAuthentication utility which provides all the zcml-predefined principals becomes invisible (speak: "useless"). This means, you don't have a manager any more and you're unable to unregister the PAU again. For that reason, I wrote a Auth-Plugin which is like a principalfolder but all principals defined there are managers. However: I wrote a Mini-Howto on how to remove the registration of a PAU manually. Unfortunately it's in german: http://zope3.mpg.de/cgi-bin/twiki/view/Zope/ZodbMagic#RemoveRegistration -> Please correct me if I'm wrong. Regards, Frank ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users -- Joe Healy | Engineer OMC-International | 6 Paterson St | Abbotsford, VIC 3067 Melbourne | Australia Phone +61 (3) 9412 6500 | Fax +61 (3) 9415 9105 http://www.omc-international.com.au/ Smarter Ports | Safer Shipping. CONFIDENTIAL COMMUNICATIONS. The information contained in this e-mail is confidential and may be subject to legal professional privilege. It is intended solely for the addressee. If you received this correspondence by mistake, please promptly inform us by reply e-mail or by telephoning +61 3 9412 6500 and then delete the e-mail and destroy any printed copy. You must not disclose, copy or rely on any part of this correspondence if you are not the intended recipient. ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
Re: [Zope3-Users] How to get PAU working?
Hi, On Wed, Dec 20, 2006 at 12:26:55AM +0200, Jonas Jarutis wrote: > Hi, > > I'm trying to set up a user folder for my site, but i cant get the PAU to > work. > I add the Pluggable Authentication Utility object, register it, add > PrincipalFolder and SessionCredentials plugins and register them. Add > a user in the Principal folder. But then i try to login, i just get > redirected to the same login form and nothing happens. > What else do i need to do? This is what has to be done (in the right order!): 1. Add a PAU 2. Make sure, the PAU knows some users - e.g. this way: 1.Add a principalfolder 2.Add a principal into the folder 3.Configure the PAU to use the principalfolder 3. Make sure, the PAU is able to extract the credentials correctly (Session-Credentials are usefull for that) 4. Register the PAU Once the PAU is registered, the default IAuthentication utility which provides all the zcml-predefined principals becomes invisible (speak: "useless"). This means, you don't have a manager any more and you're unable to unregister the PAU again. For that reason, I wrote a Auth-Plugin which is like a principalfolder but all principals defined there are managers. However: I wrote a Mini-Howto on how to remove the registration of a PAU manually. Unfortunately it's in german: http://zope3.mpg.de/cgi-bin/twiki/view/Zope/ZodbMagic#RemoveRegistration -> Please correct me if I'm wrong. Regards, Frank ___ Zope3-users mailing list Zope3-users@zope.org http://mail.zope.org/mailman/listinfo/zope3-users
