Hi. I think it is definitly a GUF Problem (raising unauthorised). I looked up the Zope-Response when trying to access a resource that is protected by GUF authorization: (Z2.log) v.b.n.m - - [08/May/2000:23:55:47 +0200] "GET /x/y/ HTTP/1.1" 500 2249 "" "Mozilla/4.0 (compati ble; MSIE 5.0; Windows 98; DigExt)" See the Response Code in the HTTP-Header. It is '500', which, according to the specs at www.w3c.org is: 10.5.1 500 Internal Server Error The server encountered an unexpected condition which prevented it from fulfilling the request. (see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.5.1 ) BUT: The response size is about 2249 bytes. That is most probably the login-form. Netscape does show this (so does IE3/4). The next request does contain necessary authorization information so the unauthorised is no longer raised. You can, alternatively provide username and authentication with: /x/y?_gufauth_name=name&_gufauth_password=pwd which does work with IE5 also. I will dig into the GUF code tomorrow. Regards, Ingo. P.S.: I do not know if this if avoidable by simply adjust IE settings.

Under Internet Options, Security I run under the Internet web content zone. Clicking on the Custom Level button I have User Authentication, Logon, Automatic Logon only in Intranet Zone set, I also have all the Scripting options enabled,Userdata persistence enabled, submit nonencrypted form data enabled,software channel permissions at medium safety, navigate sub-frames across different domains enabled, launching programs in an IFRAME enabled, installation of desktop items enabled, drag and drop enabled, access data sources across domains disabled, cookies enabled (both options). I can't see anything else there that may be relevant

I'm accessing this via an NT-based proxy server called WinGate which clearly causes no problems.

Something at the back of my mind is nagging - to do with the encryption of passwords in NT (introduced in one of the service packs). I know this can cause issues with people running Samba on Linux and there is a script which you can run (supplied with Linux somewhere) which patches the Windows registry to turn off encryption. I have run this script myself. Might it be something to do with this ??

HTH

Richard

At 07:22 08/05/00 -0400, you wrote:

...

That would be great if you could pass on the IE settings. I don't know anything about IE and the users seem to know even less. There must be some header somewhere that IE5 just doesn't like but where it is coming from is a mystery yet. Knowing that I have an IE setup that should work will help greatly in traking this down.

thanks jim

Richard Moon wrote:

...

I'm running Zope 2.1.4 with GUF using Zserver on RedHat 6.1 and I have had no trouble using IE5 on NT4 workstation. Does this point to the Apache to Zope connection being the problem - is the authorisation being passed through correctly ? Have you tried it with Zserver to see if it works in that mode ? I'll happily pass on my IE5 settings etc.

Richard

Richard Moon richard@dcs.co.uk

_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )