XUF running on a Unix or NT box will do SMB auth off any NT box in a domain, but can't do anything as nice as map Domain groups to roles, and dive users in those groups certain roles, etc. This is a limitation of the client library. The only reasonable workaround if your Zope box runs Unix is likely something like LDAP (if your network supports it) as a bridge to your NT Domain info; though if your Zope instance runs on an NT box I think there are some tools to allow you to do NT Authentication and also Authorization (map users to roles somehow). I can say, however, that the XUF SMB Authentication works just fine, and is easy to set up, provided all you are looking for is Authentication. The magic IE-specific NTLM-over-HTTP auth mechanism could work, provided you hacked it into ZServer, becuase it requires a specifc sequence of HTTP responses and headers... I've never used this, but found some info at: http://www.innovation.ch/java/ntlm.html Sean -----Original Message----- From: Andy McKay [mailto:andy@agmweb.ca] Sent: Friday, March 08, 2002 7:55 AM To: zope@zope.org Subject: Re: [Zope] Auto-Login from MS Domain Doesn't XUF have some way of auth'ing from a Windows domain? I don't know if you can auto login to a site by magically requesting the network login, sounds like it would be bit of a security risk... ----- Original Message ----- From: "Chris Withers" <chrisw@nipltd.com> To: <zope@zope.org> Sent: Friday, March 08, 2002 4:40 AM Subject: [Zope] Auto-Login from MS Domain
Hi All,
Does anyone have any idea how I could get a browser to provide authentication credentials (either basic auth or cookie auth) from the user's Network Login?
This is on Windoze, although I'm not sure of the specifics.
What are the options?
cheers,
Chris
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )