[Zope] Authentication and Zope.cgi

[LEE, Kwan Soo]

Richard Wolff wrote:

> I'm in need of a bit of clarification about how Zope starts up and when
> it decides to do its authentication and why.

Me, too ;-)

> I'm running 1.10.2, solaris 2.6, apache, pcgi, netscape 4.07.  When I request
> mymachine/Zope/manage   I do indeed get the normal management screen.
> I haven't been asked in some time for a password, which suprises me;
> the 'access' file exists and (but?) hasn't changed since installation.

This surprises me, since as far as I can see, one is always asked for password
accessing /Zope/manage. Does netscape 4.07 automatically go through authenticate
procedure?

> I'd really like the root folder to say something other than Zope, so
> I added to Apache a second rewrite rule that substitues 'mpg' for Zope
> in the two places (restarted Apache), and copied Zope.cgi in cgi-bin
> to mpg.cgi .  These two cgi files are identical so they point to the
> same /var directory.
>
> If I try   mymachine/mpg/manage  ,  I get an authorization failed box,
> and upon clicking 'retry', I get the usual authentication box with
> the correct 'access' user entered.  I type in the correct password and
> the system fails again ("You are not authorized to use this system.
> Username and password are not correct").

There are at least two possibility.
1) Misconfigured rewrite rule.
2) mpg.cgi is not altered suitably.
(oh, 1+2 gives the 3rd possibility).

I was in a similar situation a few days ago. Now one of apache virtual host on my
linux box has 1) ordinary apache site tree, 2) experimental(read 'for play') Zope
site under  hostname/Zope/ (through Zope.cgi)
3) public Zope site under hostname/public/ (through public.cgi)
If this is similar enough to what you want achieve and you are desperate enough,
just mail me your rewrite rule and Zope.cgi & mpg.cgi with sensitive parts
altered suitably. But be aware that I am new to rewrite rules and pcgi
world(hence if you are desperate enough).

> So, I'm very curious as to what's going on ... and I wouldn't mind
> learning how to change the top of the root name as well.

This is easy. Just edit BOBO_REALM (NAME?) in your *.cgi file.

LEE Kwan Soo.

ps.  my Zope's have their own var/Data.bbb but you want your Zope to point to the
same var/Data.bbb. Oh this seems far beyond the capacity of mortal being. If you
really want need this setting, I guess, the easist way to achieve it is getting
Zopal blessings from DC(i.e. make a consulting contract with DC).