[Zope-dev] Re: [Zope-Annce] jcNTUserFolder 0.2.1 released

[Jephte CLAIN]

"Jay, Dylan" wrote:
> Can I ask you a question? Something I;ve tried to do in the past with
> jcNTUserFolder (maybe not tried hard enough) is this. I want all my users to
> be authenticated via challenge-response mechanism such that no one has to
> enter a username or password.
> >From what I can work out jcNTUserFolder doesn't actually help with this at
> all, or have I missed something?
I wrote jcNTUserFolder just to do that, you know :-)
But, currently, you have to go through IIS. I think there is an howto on
http://www.zope.org/Members/jephte

I have tried to look at challenge/response authentication, but it is so
hard and so much undocumented I left it. it would require to change
Medusa (IIS and IE have a no-close connection when in challenge/response
mode. it seems it must be so at least for the challenge/response part of
the protocol; I suppose it would require too much time if they have to
authenticate on each connection :), and to change Zope (you don't have
the password, just a hash, that you must ask the PDC to validate for
you, unless someone know how the hash is generated), and to have a
compatible User Folder.

however, if someone can point me to a good source of documentation about
that, and some example code, I may want to give it a try again.

regards,
jephte.clain@univ-reunion.fr