[Zope] RE: problems with NTUserFolder.

[Jay, Dylan]

I'm a little confused over this.
From your previous mail I understood that jcNTUserFolder was to be used only
behind IIS. It interpreted the REMOTE_USER var passed in after
challenge/response authentication by IIS and made this into a Zope user.
Now your talking about jcForceAuth and saying that users login using basic
authentication with their NT username and password??????

Under what circumstances can you use challenge/response vs basic
authentication?

> -----Original Message-----
> From: CLAIN Jephte [mailto:minf7@educ.univ-reunion.fr]
> Sent: Saturday, May 27, 2000 12:19 AM
> To: Jay, Dylan
> Cc: 'zope@zope.org'
> Subject: Re: problems with NTUserFolder.
> 
> 
> "Jay, Dylan" a écrit :
> > I see how it works now. I installed jcNTUSerFolder but 
> couldn't get it to
> > work. I thought it did the challenge response stuff for me. 
> I didn't realize
> > it had to go behind IIS. I'll give it a try.
> The challenge/response protocol authentication, as far as I know, is
> specific to microsoft. that's why you have to use IIS for 
> example to do
> the authenticatio for you.
> I don't know of another browsers / ftp clients / mail clients that can
> perform that kind of authentication, beside those from microsoft (IE,
> Outlook, ...)
> 
> You may also have a look at
> http://www.zope.org/Members/jephte/jcForceAuth for a way to 
> force users
> to authenticate. they have to identify themselves to browse the site,
> but at least they can use their own nt account/password. be warned
> though: passwords are sent unencrypted over the wire with basic
> authentication.
> 
> regards,
> jephte clain
> minf7@educ.univ-reunion.fr
>