- I've got a folder 'test' with exUserFolder's acl_users. An authentication source is defined as PostgreSQL Auth Source, and there are null property and membership sources.

- XUF properties are set to cookie based auht or secure cookie based auth - when I set it to standard basic auth everything is ok.

- In my 'test' folder I have created 'secured' (it's a name) folder and removed permissions to 'access content data' and 'view' for anonymous users.

Everybody is allowed to view test's folder index_html and then to click on a link to 'secured' folder. After user selects the link I expect Zope to redirect to a login page (default docLogin at acl_users/contents), log the user in and then redirect to secured's folder index_html. But althought this works with my favourite Opera browser it doesn't work with MSIE (I have tested it with v.6.0), which states that there is: HTTP 500 - Internal server error. The next thing is that in Zope's error log I get the following:

Exception Value: <HTML> <HEAD> <TITLE>Logging In</TITLE> <META HTTP-EQUIV=Expires CONTENT="2003-03-22"> <META HTTP-EQUIV=Refresh CONTENT="0; URL=http://localhost:8080/ex/secured/acl_users/ redirectToLogin?destination=http://localhost:8080/ex/secured/index_html"> </HEAD> <BODY> </BODY></HTML>

Module ZPublisher.Publish, line 89, in publish
Module ZPublisher.BaseRequest, line 409, in traverse
Module Products.exUserFolder.exUserFolder, line 1026, in validate
Module Products.exUserFolder.exUserFolder, line 938, in cookie_validate

LoginRequired: <HTML> <HEAD> <TITLE>Logging In</TITLE> <META HTTP-EQUIV=Expires CONTENT="2003-03-22"> <META HTTP-EQUIV=Refresh CONTENT="0; URL=http://localhost:8080/ex/secured/acl_users/redirectToLogin?destination=http:// localhost:8080/ex/secured/index_html"> </HEAD> <BODY> </BODY></HTML>

Why? Something is wrong with cookie_validate? I don't think so. But, in the case, what is wrong? And one more thing - after i click the link to 'secured' (Opera) then for a short time i can see a page that states that 'there was error while rendering standard error template'.

Last question - I have read somewhere that I can define 'LoginForm' ZPT in my 'test' folder, and XUF should use it instead (??) of it's internal docLogin. Am I right? What for is it? To allow customization of docLogin?