[Zope] single sign-on

[David H]

robert rottermann wrote:

> Fernando Martins wrote:
>
>> Hi,
>>
>> I'm doing single sign-on using Apache+mod_ntlm+FastCGI. Since the 
>> last is
>> deprecated, is there any alternative?
>>
>> TIA,
>> Fernando Martins
>>
>> _______________________________________________
>> Zope maillist  -  Zope at zope.org
>> http://mail.zope.org/mailman/listinfo/zope
>> **   No cross posts or HTML encoding!  **
>> (Related lists -  http://mail.zope.org/mailman/listinfo/zope-announce
>>  http://mail.zope.org/mailman/listinfo/zope-dev )
>>
>>   
>
> Fernando,
> during the next 4 weeks we will be prototyping a site.
> One of the request we have to meet is SSO using
> Active Directory to manage the users. One of the request
> we *should* meet (I declined to commit ourselfs for this feature)
> is that a user when logged into Windows she is automaticaly logged into
> Plone. The server is running on a Linux box (SuSE 9.3 or later)
> No idea yet whether this is possible yet, and I have read all related 
> info with interest.
> If you like we can try to join forces.
>
> Robert
>
>
> _
>
>  
>
Robert,

You can python + COM your way to a browser startup zope/plone login 
screen.  I cannot see how you automate the authentication of a given 
browser instance that is then handed to your users.

Maybe someone will correct this.  If so everyone's happy.

Of course, you could make your plone site anonymous if you feel your 
secure by the time they get there.

David