[Zope] NT User Authentication

[Erik Myllymaki]

the PDC and zopeserver are on the same switch.

<what I know of the internal workings of the Zope security scheme can 
fit in a small dixie cup >

I had to do a little hacking to get the NT Groups to act as local 
security roles in Zope, and while doing that, I noticd that the 
getRoles() method in AccessControl/Users.py is used for every object on 
a page. Combined with a fairly slow lookup to begin with, and complex 
pages are VERY slow.

There must be a good reason for this, but I would have thought the 
users' role info would have been cached at a higher level somehow...

</what I know of the internal workings of the Zope security scheme can 
fit in a small dixie cup >


Bobb wrote:

>----- Original Message -----
>From: "Chris Withers" <chris at simplistix.co.uk>
>To: <erik.myllymaki at aviawest.com>
>Cc: "Bobb" <rawbobb at hotmail.com>; <zope at zope.org>
>Sent: Friday, May 07, 2004 4:27 AM
>Subject: Re: [Zope] NT User Authentication
>
>
>  
>
>>Erik Myllymaki wrote:
>>
>>    
>>
>>>the zope instance is running on a win2k server, but I need to
>>>authenticate against an NT Domain.
>>>
>>>I did get things going last night, to a point where my NT Groups are
>>>acting as Local Roles, and I can authenticate to my PDC, but it is
>>>really, really slow.
>>>      
>>>
>
>how far away (hops) is the PDC? is there a BDC closer?
>
>  
>
>>Time to do some analysis really. Sounds like you needs some caching at
>>    
>>
>crucial
>  
>
>>points... What userfolder are you using?
>>
>>Chris
>>
>>--
>>Simplistix - Content Management, Zope & Python Consulting
>>            - http://www.simplistix.co.uk
>>
>>
>>    
>>
>
>
>  
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.zope.org/pipermail/zope/attachments/20040507/2a879fd8/attachment.html