I'm a little confused over this.
From your previous mail I understood that jcNTUserFolder was to be used only behind IIS. It interpreted the REMOTE_USER var passed in after challenge/response authentication by IIS and made this into a Zope user. Now your talking about jcForceAuth and saying that users login using basic authentication with their NT username and password??????
Under what circumstances can you use challenge/response vs basic authentication?
-----Original Message----- From: CLAIN Jephte [mailto:minf7@educ.univ-reunion.fr] Sent: Saturday, May 27, 2000 12:19 AM To: Jay, Dylan Cc: 'zope@zope.org' Subject: Re: problems with NTUserFolder.
"Jay, Dylan" a écrit :
I see how it works now. I installed jcNTUSerFolder but couldn't get it to work. I thought it did the challenge response stuff for me. I didn't realize it had to go behind IIS. I'll give it a try. The challenge/response protocol authentication, as far as I know, is specific to microsoft. that's why you have to use IIS for example to do the authenticatio for you. I don't know of another browsers / ftp clients / mail clients that can perform that kind of authentication, beside those from microsoft (IE, Outlook, ...)
You may also have a look at http://www.zope.org/Members/jephte/jcForceAuth for a way to force users to authenticate. they have to identify themselves to browse the site, but at least they can use their own nt account/password. be warned though: passwords are sent unencrypted over the wire with basic authentication.
regards, jephte clain minf7@educ.univ-reunion.fr