I see how it works now. I installed jcNTUSerFolder but couldn't get it to work. I thought it did the challenge response stuff for me. I didn't realize it had to go behind IIS. I'll give it a try.
-----Original Message----- From: Jephte CLAIN [mailto:minf7@educ.univ-reunion.fr] Sent: Thursday, May 25, 2000 8:14 PM To: Jay, Dylan Cc: 'zope@zope.org' Subject: Re: problems with NTUserFolder.
"Jay, Dylan" a écrit :
I can't seem to get your product to work the way I want.
I'll tell you what
I'm after and perhaps you can tell me where I'm going wrong or if indeed your product can do it at all.
I have a group of users who are all part of the same domain as I am on. Its the department domain. I want to have these people recognized by my website seemlessly. I know this can be done with NT challenge response if you are using ie as your client. I want to do this in zope such that users who enter the site are automatically authenticated and appriate permissions for them set. These would be zope permission set inside zope, nothing to do with NT permissions.
How do I do this? Well, I wrote jcNTUserFolder to do exactly this :-)
you may have a look at http://www.zope.org/Members/jephte/HOWTO/IIS_and_Zope_in_REMOT E_USER_mode
a few comments: - you have to install the jcNTUserFolder *before* you put Zope in REMOTE user mode. - zope in its current form can't handle REMOTE user authentication mode together with standard authentication mode. When you install Zope as as pcgi process to get through IIS, it is the *only* way to be authenticated and get, for example, to the management screens. When you install jcNTUserFolder as the root user folder, you have to choose the NT user that will be mapped to the super user. The first time, you have to log with that user. Note that this 'super user' needn't be a privileged one under NT. regards, jephte clain minf7@educ.univ-reunion.fr