Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-08 Thread Dieter Maurer
mark hellewell wrote at 2005-5-7 20:22 +0100: On 5/7/05, Chris McDonough [EMAIL PROTECTED] wrote: Web Folders pass cookies around too, FWIW, so it's probably not strictly necessary to use http basic auth. But without using http basic auth, there is no way to log in unless you have them go to

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Jens Vagelpohl
On May 6, 2005, at 23:52 , mark hellewell wrote: On 5/6/05, Tino Wildenhain [EMAIL PROTECTED] wrote: Actually, it does not. You have no such thing like a session when all you have is webdav. I dont know if many dav-clients store cookies too - it may depend on your usecase. Yes the use-case is

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Chris McDonough
Web Folders pass cookies around too, FWIW, so it's probably not strictly necessary to use http basic auth. But without using http basic auth, there is no way to log in unless you have them go to the web interface first, then launch a web folder, so maybe impractical. - C On Sat, 2005-05-07 at

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread Tino Wildenhain
Am Samstag, den 07.05.2005, 12:04 -0400 schrieb Chris McDonough: Web Folders pass cookies around too, FWIW, so it's probably not strictly necessary to use http basic auth. But without using http basic auth, there is no way to log in unless you have them go to the web interface first, then

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread mark hellewell
On 5/7/05, Chris McDonough [EMAIL PROTECTED] wrote: Web Folders pass cookies around too, FWIW, so it's probably not strictly necessary to use http basic auth. But without using http basic auth, there is no way to log in unless you have them go to the web interface first, then launch a web

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-07 Thread mark hellewell
On 5/7/05, Tino Wildenhain [EMAIL PROTECTED] wrote: Well, in theory its possible if the client accepts cookie to just store the amount of wrong attempts via cookie (or id - which would be the same) and deny any password, be it even the correct one when it comes via basic auth. Store the

[Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread mark hellewell
Hello! I'd like a little help, please :) I have a site that uses PluggableUserFolders for its acl_users. The web-based portion of the login process locks out a user after 3 unsuccessfull attempts at the password and i'd like to be able to do something similar for users who try to connect via

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread Dieter Maurer
mark hellewell wrote at 2005-5-6 14:44 +0100: I have a site that uses PluggableUserFolders for its acl_users. The web-based portion of the login process locks out a user after 3 unsuccessfull attempts at the password and i'd like to be able to do something similar for users who try to connect via

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread Tino Wildenhain
Am Freitag, den 06.05.2005, 19:26 +0100 schrieb mark hellewell: On 5/6/05, Dieter Maurer [EMAIL PROTECTED] wrote: WebDAV uses basic HTTP authentication which should use whatever UserFolder you have installed. Thanks.. So, I think I should be able to modify the authentication plugin of

Re: [Zope] Is it possible to extend Zopes WebDAV authentication?

2005-05-06 Thread mark hellewell
On 5/6/05, Tino Wildenhain [EMAIL PROTECTED] wrote: Actually, it does not. You have no such thing like a session when all you have is webdav. I dont know if many dav-clients store cookies too - it may depend on your usecase. Yes the use-case is Windows Explorer users only. Without cookies