[Zope] Re: problems with NTUserFolder.

2000-05-25 Thread Jephte CLAIN

"Jay, Dylan" a écrit :
> 
> I can't seem to get your product to work the way I want. I'll tell you what
> I'm after and perhaps you can tell me where I'm going wrong or if indeed
> your product can do it at all.
> 
> I have a group of users who are all part of the same domain as I am on. Its
> the department domain. I want to have these people recognized by my website
> seemlessly. I know this can be done with NT challenge response if you are
> using ie as your client. I want to do this in zope such that users who enter
> the site are automatically authenticated and appriate permissions for them
> set. These would be zope permission set inside zope, nothing to do with NT
> permissions.
> 
> How do I do this?
Well, I wrote jcNTUserFolder to do exactly this :-)

you may have a look at
http://www.zope.org/Members/jephte/HOWTO/IIS_and_Zope_in_REMOTE_USER_mode

a few comments:
- you have to install the jcNTUserFolder *before* you put Zope in REMOTE
user mode.
- zope in its current form can't handle REMOTE user authentication mode
together with standard authentication mode. When you install Zope as as
pcgi process to get through IIS, it is the *only* way to be
authenticated and get, for example, to the management screens. When you
install jcNTUserFolder as the root user folder, you have to choose the
NT user that will be mapped to the super user. The first time, you have
to log with that user. Note that this 'super user' needn't be a
privileged one under NT.

regards,
jephte clain
[EMAIL PROTECTED]

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Re: help!

2000-06-21 Thread Jephte CLAIN

"Eden, Matthew" wrote:
> I am having some trouble with the jcNTUserFolder.  The NT security is in
> place, and when I link to the Zope management screens in I can get to them.
so far so good

> But the screens are not correct.  The right frame of the management screen
> does not have the existing objects list, but only the Welcome to Zope
> content screen. 
Is your zope server working standalone or is it behind IIS? Is your NT
version 4.0 SP6? If not, what version is your NT server / SP ?
I'm looking for the explanation for that problem, and I think it is SP6
fault. You might help me to nail down the problem

> When I go to the user folder the users' names (with the
> exception of the administrator user) are not listed in the canonical form.
> I wonder if that is the problem?
Local users are not listed in the cannonical form. the administrator
user is special and is always listed in cannonical form. but this is
just presentation. the logic is the same.

> There is no way to add new users except through the nt security module. 
> Must I input new users in the nt security module with user names
> like "DOMAIN\userid"?
you add users the normal way, with nt user manager. jcNTUserFolder hooks
into the nt security module to get users. That way, you can get all the
users you have defined under NT without the need to create them again
under Zope.

regards,
jephte clain
[EMAIL PROTECTED]

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )