Thanks Zac... it doesn't appear as if there is an easy way around the ZEO problem, without involving another large amount of complexity. I'll bump heads with a few of the local Zope gurus and also see if the Pound (our http load balancer of choice) developers have any suggestions. Cheers John Snowdon - IT Support Specialist -==========================================- School of Medical Education Development Faculty of Medical Sciences Computing University of Newcastle

-----Original Message----- From: zope-dev-bounces@zope.org [mailto:zope-dev-bounces@zope.org] On Behalf Of Zachery Bir Sent: 26 April 2005 16:37 To: zope-dev@zope.org Subject: [Zope-dev] Re: ZEO, FastCGI and Shibboleth

On 2005-04-25 06:58:17 -0400, "John Snowdon" <J.P.Snowdon@newcastle.ac.uk> said:

...

Has anyone any thoughts about how to go about shibboleth enabling a whole host of ZEO instances... without each one having an Apache server sitting in front of it? Or is there an alternative method out there that perhaps is not widely known?

We'd contemplated doing more work with PAS and Shibboleth to actually get Zope to do the equivalent of mod_shibboleth, but it never went anywhere. We stick Zope behind Apache (or some other proxying system - Squid, et al.) as a matter of course, so it was a no-brainer to just use mod_shibboleth in situ.

We've posted the contents (modulo any specific policy) of our Shibboleth implementation for PAS. It amounts to a few Scriptable Plugins to handle the specific HTTP headers that get scribbled on a Shibboleth session. Here's the message:

<http://mail.zope.org/pipermail/zope-pas/2005-March/000314.html>

Zac