Re: AW: [Zope] Authentication against Win2000 Active Directory

LDAPUserFolder has something that it calls "groups" but that everybody else in Zope calls "roles" :-)

...simply because group records in LDAP have no knowledge of and nothing to do with zope roles. "groups" are LDAP records that group other records (in this case user records) together. groups are just used by the LDAPUserFolder to map them to real zope roles. it was my goal to keep this distinction visible. hope that cleared it up. jens