[Zope] Re: LDAPUserFolder at Zope root

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

J Cameron Cooper wrote:
> Oscar Figueiredo wrote:
> 
>> this might be trivial but I just can't find a way to do it.  How does one
>> replace the initial UserFolder at Zope root with a LDAPUSerFolder ? 
>> I tried the dummy way : delete the acl_users with an intent to
>> instanciate a
>> LDAPUSerFolder afterwards but that locked me out in a way I could do
>> nothing
>> but recreate a new Zope instance...  skip-authentication-checking in
>> etc/zope.conf didn't help...
> 
> 
> Do not do that. You don't want to get locked out of your Zope because of
> LDAP problems.
> 
> If you must have several other folders share a user folder other than
> the default, create a folder that contains everything.

Unless you are actively developing a new user folder implementation, the
risk of being locked out is not too bad:  "stable" user folders always
emulate the "stock" version's handling of the EmergencyUser, which gives
you a way to log in and fix / delete a broken '/acl_users'.

If you *are* working on a new user folder implementation, then
'bin/zopectl debug' is your friend:

  $ bin/zopectl debug
  ...
  >>> app._delObject('acl_users')
  >>> del app.__ac_groups
  >>> get_transaction().commit()  # Z27, deprecated in Z28


Tres.
- --
===================================================================
Tres Seaver                                   tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFClnju+gerLs4ltQ4RAoc0AJ0b10k04CEkonsKr4tEtOj0jcDJ1wCgqSn2
Ynw8lGPwGawmTZlWTxoB6Rs=
=Fvbi
-----END PGP SIGNATURE-----