Re: [Zope] repost : pb with acl_users "domains" for clients behind a proxy/firewall

2000-09-09 Thread Dieter Maurer 

Didier Georgieff writes:
 > Our users are acessing to the Zope server (wich is on the Internet) thru 
 > corporate (government) firewall/proxys.
 > 
 > Some users in acl_users are declared with a "domain" restriction.
 > wich is a generic "gouv.fr" or "agriculture.gouv.fr".
 > 
 > It doesn't seems to be effective and the login is rejected, while the same user 
 > without any "domain" restriction works fine.
The code handling the "domain" restrictions is in
"AccessControl.User.domainSpecMatch".

It looks at REMOTE_HOST and REMOTE_ADDR.
Thus, your proxy must pass this unchanged.


Dieter

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )

[Zope] repost : pb with acl_users "domains" for clients behind a proxy/firewall

2000-09-08 Thread Didier Georgieff 

Hello,

I'm reposting here, since i couldn't solve this strange problem.

Our users are acessing to the Zope server (wich is on the Internet) thru 
corporate (government) firewall/proxys.

Some users in acl_users are declared with a "domain" restriction.
wich is a generic "gouv.fr" or "agriculture.gouv.fr".

It doesn't seems to be effective and the login is rejected, while the same user 
without any "domain" restriction works fine.

I'm suspecting some changes in the REQUEST made by the corporate proxys.
Is there any doc about what REQUEST variable is used in the 
"domains" restriction ? 

I have a HTTP_FORWARDED in the REQUEST but with the 
*proxy* name (unfortunately without the .gouv.fr). 

I can't find anything on the site and the list either.Thanks in advance.

Didier Georgieff.



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )