----- Original Message -----

From: Erik Myllymaki

To: Bobb

Cc: Chris Withers ; zope@zope.org

Sent: Friday, May 07, 2004 11:46 AM

Subject: Re: [Zope] NT User Authentication

the PDC and zopeserver are on the same switch.

<what I know of the internal workings of the Zope security scheme can fit in a small dixie cup >

I had to do a little hacking to get the NT Groups to act as local security roles in Zope, and while doing that, I noticd that the getRoles() method in AccessControl/Users.py is used for every object on a page. Combined with a fairly slow lookup to begin with, and complex pages are VERY slow.

 

There must be a good reason for this, but I would have thought the users' role info would have been cached at a higher level somehow...

</what I know of the internal workings of the Zope security scheme can fit in a small dixie cup >


Bobb wrote:

----- Original Message -----
From: "Chris Withers" <chris@simplistix.co.uk>
To: <erik.myllymaki@aviawest.com>
Cc: "Bobb" <rawbobb@hotmail.com>; <zope@zope.org>
Sent: Friday, May 07, 2004 4:27 AM
Subject: Re: [Zope] NT User Authentication


  

Erik Myllymaki wrote:

    

the zope instance is running on a win2k server, but I need to
authenticate against an NT Domain.

I did get things going last night, to a point where my NT Groups are
acting as Local Roles, and I can authenticate to my PDC, but it is
really, really slow.
      

how far away (hops) is the PDC? is there a BDC closer?

  

Time to do some analysis really. Sounds like you needs some caching at
    

crucial
  

points... What userfolder are you using?

Chris

--
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk


    

---

_______________________________________________
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )