Hannu wrote:

Pieter wrote:

...

This is considered painfull. Is there a way to force re-authentication without leaving the browser (Mozilla)?

I have been told that this can be done by changing the Domain (defined by __bobo_realm__ in bobo, probably the same in Zope ?)

You can create a document that they can visit that changes the HTTP header. This will, though, bring up a new dialog box. Unfortunately, Zope has little to do on this -- making the browser do something against the grain of the spec is pretty hard. --Paul