[Zope] Doing authentification on my own

[Rob Boyd]

Why not use one of the existing user folder products
and write an authenctication source for it?  I use
exUserFolder for one of my Zope sites to authenticate
users against an existing user management app, where
users are in a Postgresql DB, and login is done with a
Perl script.  I have my own queries against the user's
group memberships to determine their roles (The DB
doesn't have a roles table).  When unauthenticated
users hit the site, they are redirected to the user
mgmt site's login page, and after login they are
redirected to the Zope site.  If they have a valid
session already with the user mgmt site and hit the
Zope site, they are considered logged in and get
authenticated/authorized.  It was considerably easier
to create my own authentication source and plug it
into exUserFolder than writing the entire mechanism
from scratch.

-Rob Boyd

--- Florian Lindner <mailinglists at xgm.de> wrote:
> Hello,
> I want to do authentification whithout a userfolder.
> It should work like this:
> The login credentials are submitted from a form to a
> script. This script 
>   looks up the user data in a SQL-database and
> redirect to a 
> login-failed page if the form-data is wrong. If the
> form-data is right 
> is constructs a userObject and redirects a a loginok
> page or to 
> $destination.
> Problems:
> - Constructing a userObject? How to do that? How to
> make it clear to 
> Zope that this session is authentificated? Is this
> done with the 
> construction of the userObjekt?
> - How to define the login-page to which Zope
> redirects if a anon-user 
> tries to  access protected content? The requested
> URL should be passed 
> as a parameter ($destination) to the login-page.
> 
> Is this possible?
> Thanks,
> Florian
> 
> 
> _______________________________________________
> Zope maillist  -  Zope at zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists - 
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com