Hello, I want to authenticate users from acl_users with my own HTML form and a python script. I can't use user._getPassword() because it's an internal method. and it seems user.authenticate function calls browser authentication again. How could I achieve this? This is the code I use: *************** ZPT "form" *************** ... <form action="login" method="post"> <table class="form"> <tbody> <tr> <th class="text">Name: </th> <td><input name="user" size="12" maxlength="12" value=""></td> </tr> <tr> <th class="text">Password: </th> <td><input name="password" type="password" size="12" maxlength="8" value=""></td> </tr> <tr><td> </td></tr> <tr> <td align="center"> <input type="reset" value="Clean"> </td> <td align="center"> <input type="SUBMIT" value="Submit"> </td> </tr> </tbody> </table> </form> ... ********************************************* *************** Script (Python) "login" *************** request = container.REQUEST RESPONSE = request.RESPONSE user = container.acl_users.getUser(request.user) try: if user.authenticate('the_password', request): print 'OK' else: print 'FAILED' except AttributeError: print 'User doesn\' exist' return printed ********************************************* Thanks in advance, Iñigo