Re: [Zope] Password expiration

2006-11-14 Thread Andreas Jung



--On 15. November 2006 11:11:53 +0800 Sinang, Danny 
[EMAIL PROTECTED] wrote:



Hello,

Out of the box, is Zope able to do password-expiration ?



No

-aj

pgp0gIxrDues4.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password expiration

2006-11-14 Thread robert rottermann
zope by it self can not do such an expiration.

there is a product for plone cmfmeber (now in transition to
become obsolete and replaced by membrane) that treats a user
like some portal content that can be controlled by a workflow,
expiration date and so on.

I do not know whet the state of membrane is.
robert

Sinang, Danny wrote:
 Hello,
  
 Out of the box, is Zope able to do password-expiration ?
  
 Or do I need an authentication product to do this ? Will this external
 product be able to effect password expiration on existing acl_user
 folder users ?
  
  
 Regards,
  
 Danny
  
 
 
 
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )

begin:vcard
fn:robert  rottermann
n:rottermann;robert 
email;internet:[EMAIL PROTECTED]
tel;work:031 333 10 20
tel;fax:031 333 10 23
tel;home:031 333 36 03
x-mozilla-html:FALSE
version:2.1
end:vcard

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Jens Vagelpohl
On May 6, 2005, at 12:08 , Phil Beardmore wrote:
This may be a really simple thing to do (but I'm a bit stuck and  
searched the web but found no answers).  I have a Plone site  
working great.  I have a folder which I wish to password protect  
(and all of the data in the folder).  Thing is, I want to use our  
LDAP server for authentication.  I have the site setup as normal  
with an ACL_users folder.  I then have a folder called  
protected.  In this folder I have added a LDAPUserFolder object  
and linked it with our main LDAP server.  Question is, how do I use  
this LDAPUserFolder to provide authentication for the Protected  
folder?
???
There is nothing you set up to make Zope use a user folder. It will  
automatically be consulted.

jens
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Andreas Pakulat
On 06.Mai 2005 - 12:44:24, Jens Vagelpohl wrote:
 
 On May 6, 2005, at 12:08 , Phil Beardmore wrote:
 
 This may be a really simple thing to do (but I'm a bit stuck and  searched 
 the web but found no answers).  I have a Plone site  working great.  I have 
 a 
 folder which I wish to password protect  (and all of the data in the 
 folder).  
 Thing is, I want to use our  LDAP server for authentication.  I have the 
 site 
 setup as normal  with an ACL_users folder.  I then have a folder called  
 protected.  In this folder I have added a LDAPUserFolder object  and 
 linked 
 it with our main LDAP server.  Question is, how do I use  this 
 LDAPUserFolder 
 to provide authentication for the Protected  folder?
 
 ???
 
 There is nothing you set up to make Zope use a user folder. It will  
 automatically be consulted.

As long as the object has an id of acl_users. 

Andreas

-- 
You will be given a post of trust and responsibility.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Andrew Milton
+---[ Andreas Pakulat ]--
| On 06.Mai 2005 - 12:44:24, Jens Vagelpohl wrote:
|  
|  On May 6, 2005, at 12:08 , Phil Beardmore wrote:
|  
|  This may be a really simple thing to do (but I'm a bit stuck and  searched 
|  the web but found no answers).  I have a Plone site  working great.  I 
have a 
|  folder which I wish to password protect  (and all of the data in the 
folder).  
|  Thing is, I want to use our  LDAP server for authentication.  I have the 
site 
|  setup as normal  with an ACL_users folder.  I then have a folder called  
|  protected.  In this folder I have added a LDAPUserFolder object  and 
linked 
|  it with our main LDAP server.  Question is, how do I use  this 
LDAPUserFolder 
|  to provide authentication for the Protected  folder?
|  
|  ???
|  
|  There is nothing you set up to make Zope use a user folder. It will  
|  automatically be consulted.
| 
| As long as the object has an id of acl_users. 

And the containing folder has __allow_groups__ attribute set to that user
folder.

In fact you can call your user folder anything, as long as this attribute is
set to be the instance..

-- 
Andrew Milton
[EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Jens Vagelpohl
On May 6, 2005, at 1:24 , Andreas Pakulat wrote:
There is nothing you set up to make Zope use a user folder. It will
automatically be consulted.

As long as the object has an id of acl_users.
Umh, no. First of all, all user folders have that ID. If not, they  
are not user folders. Secondly, the ID is not used to hook into the  
authentication mechanism. It has nothing to do with it really.

jens
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Jens Vagelpohl
On May 6, 2005, at 1:26 , Andrew Milton wrote:

|  There is nothing you set up to make Zope use a user folder.  
It will
|  automatically be consulted.
|
| As long as the object has an id of acl_users.

And the containing folder has __allow_groups__ attribute set to  
that user
folder.

In fact you can call your user folder anything, as long as this  
attribute is
set to be the instance..

Exactly.
jens
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Password Protection

2005-05-06 Thread Jens Vagelpohl
On May 6, 2005, at 2:23 , Phil Beardmore wrote:
Hi Guys, still cant get it to work.  Is it okay to have multiple  
ACL_users folders?  Basdically I want to grant access to Folder A  
to all users in one tree of our LDAP server, then grant access to  
Folder B to all users in another Tree.  I can get the folder to be  
password protected, so they need to login to access the pages, but  
it always seems to use the acl_users folder at the root of the site.
It is perfectly OK to have several user folders. The closest one  
looking towards the root of the ZODB will be used when accessing a  
resource, and if it cannot resolve the credentials the next one up is  
consulted, until you reach the root user folder.

The fact that authentications falls through to the root user folder  
makes me thing the LDAPUserFolder instance is misconfigured.

jens
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Confusing posts (was Re: [Zope] password)

2000-07-30 Thread jan

Jonathan Desp wrote:
 
 Hi,
 
 the program zpasswd prompt.
...
 Filename is not option, and should be the name of the file to store the
 information in.

...

 What I should write in this source code from zpasswd ? --

What is your question, now?
Generally, you should not write anything in the source code to
zpasswd.py, unless you want to change how it works. But you know
that, don't you.

Jonathan, it happens often on the list that someone posts
confusing questions, where people scratch their head for some
time trying to figure out what the person's problem might be.
This is rather inefficient, as the person does not get the answer
they want, or get an answer that does not fit their problem (as
the answering person did not understand it).
Unfortunately, your posts fall rather often in this category.

I would recommend that, when asking a question to the list, to
- take time describing your problem clearly, assuming the reader
knows Zope but not your application;
- make clear what you want to achieve;
- make clear if you either have a question how to do something,
or if anything does not work as you expected;
- wait at least one hour and re-read your post to verify that it
is fully understandable before actually posting it;
- if at all possible, have some other person read your post and
ask them to rephrase your question back to you, i.e., make sure
that they get your real question from your post.

More work? For you, initially yes. For all together? No, a lot
less. For you untilk you get an answer? Probably not, as you are
much more likely to get an answer to your problem, without
several exchanges back and forth.
In any case, it is making better use of the time of people
wanting to help you, and prevents them from just adding you to
their kill file (as I was very nearly to do at some time).
And it is likely to give you a better standing in the Zope
community. 

This is not to say that I am perfect in that respect - even after
some fourteen years on mailing lists I still manage to send out
posts that I find less than perfect upon reading them when they
come back from the listserver. But one must always strive for the
best :-)

Cheera,
Jan

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] password

2000-07-30 Thread Eric L. Walstad

Hi Jonathan,

Try this from the console:

python zpasswd.py --username="superuser" --password="TheNewPassword"
"access"

This is documented in the Zope installation files.

Note that doing it this way, the command line will be stored in the command
line buffer file on your system, which may be a security issue.

HTH,

Eric.

// -Original Message-
// From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
// Jonathan Desp
// Sent: Saturday, July 29, 2000 3:21 PM
// To: [EMAIL PROTECTED]
// Cc: zope zope zope
// Subject: [Zope] password
//
//
// Hi,
//
// the program zpasswd prompt.
//
// they said:
snip


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] password

2000-07-30 Thread Bill Anderson

"Eric L. Walstad" wrote:
 
 Hi Jonathan,
 
 Try this from the console:
 
 python zpasswd.py --username="superuser" --password="TheNewPassword"
 "access"
 
 This is documented in the Zope installation files.
 
 Note that doing it this way, the command line will be stored in the command
 line buffer file on your system, which may be a security issue.


To avoid this you could do:

$ python zpasswd.py access

And just answer the prompts ;)

--
Do not meddle in the affairs of sysadmins, for they are easy to annoy,
and have the root password.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )