[Zope] NT User Authentication

[Bobb]

sorry for the top post...
just as a thought, are you using a local group or a domain group?
(zope-gurus, please help)... maybe one is faster than the other?
  ----- Original Message ----- 
  From: Erik Myllymaki 
  To: Bobb 
  Cc: Chris Withers ; zope at zope.org 
  Sent: Friday, May 07, 2004 11:46 AM
  Subject: Re: [Zope] NT User Authentication


  the PDC and zopeserver are on the same switch.

  <what I know of the internal workings of the Zope security scheme can fit in a small dixie cup >

  I had to do a little hacking to get the NT Groups to act as local security roles in Zope, and while doing that, I noticd that the getRoles() method in AccessControl/Users.py is used for every object on a page. Combined with a fairly slow lookup to begin with, and complex pages are VERY slow.



  There must be a good reason for this, but I would have thought the users' role info would have been cached at a higher level somehow...

  </what I know of the internal workings of the Zope security scheme can fit in a small dixie cup >


  Bobb wrote: 
----- Original Message -----
From: "Chris Withers" <chris at simplistix.co.uk>
To: <erik.myllymaki at aviawest.com>
Cc: "Bobb" <rawbobb at hotmail.com>; <zope at zope.org>
Sent: Friday, May 07, 2004 4:27 AM
Subject: Re: [Zope] NT User Authentication


  
Erik Myllymaki wrote:

    
the zope instance is running on a win2k server, but I need to
authenticate against an NT Domain.

I did get things going last night, to a point where my NT Groups are
acting as Local Roles, and I can authenticate to my PDC, but it is
really, really slow.
      

how far away (hops) is the PDC? is there a BDC closer?

  
Time to do some analysis really. Sounds like you needs some caching at
    
crucial
  
points... What userfolder are you using?

Chris

--
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk


    


  


------------------------------------------------------------------------------


  _______________________________________________
  Zope maillist  -  Zope at zope.org
  http://mail.zope.org/mailman/listinfo/zope
  **   No cross posts or HTML encoding!  **
  (Related lists - 
   http://mail.zope.org/mailman/listinfo/zope-announce
   http://mail.zope.org/mailman/listinfo/zope-dev )

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.zope.org/pipermail/zope/attachments/20040507/7296723b/attachment.html