*** tiredbones has quit IRC | 00:04 | |
roym | flox: I am not really sure if it has to do with cookies or what... I | 00:04 |
---|---|---|
roym | have a site A within the top level folder, and a PAU configured for | 00:04 |
roym | site A. The userid I am coming in as is not a PAU user, but a top | 00:04 |
roym | level user (ie: configured in zcml). | 00:04 |
*** tiredbones has joined #zope3-dev | 00:05 | |
roym | it is accesses to /A/* that I see issues with (ie: reauthentication). | 00:05 |
flox | i see: | 00:07 |
flox | first u authenticate to /++skin++MySkin/A/@@index.html | 00:07 |
flox | then u visit /++skin++Rotterdam/A/@@index.html | 00:07 |
roym | yes, exactly. | 00:07 |
flox | and u have to authenticate again. | 00:07 |
roym | yes - but not if I use the opposite sequence (ie: Rotterdam first). | 00:08 |
flox | both URL use same ip address, and same port, i assume | 00:08 |
roym | absolutely. | 00:08 |
flox | i try this scenario on my box... | 00:09 |
roym | it could be a lack of understanding on my part, but MySkin inherits from Rotterdam. | 00:09 |
flox | on my side, no such problem... | 00:11 |
flox | do use IP address or host name, to access ur server? | 00:11 |
roym | it is a hostname (on my local network). | 00:12 |
roym | why - would that make a difference? | 00:12 |
flox | if ur browser authenticate on ur hostname, u are not authenticated for the IP address | 00:12 |
flox | and the sam, the other way | 00:12 |
roym | ah, so one must not mix IP and hostnames | 00:13 |
flox | yes | 00:13 |
roym | how does one debug authentication failures? | 00:13 |
flox | look at your code, if u mix ip and hostname | 00:13 |
roym | it would be nice if there was some level of tracing as to why a plugin refused a login/password. | 00:13 |
flox | hard to figure out... | 00:14 |
roym | ok - will double check, but I am pretty sure I am consistent in my usage of hostname. | 00:14 |
flox | try to reach the server with IP adress | 00:14 |
flox | and test ur bug, when u call only IP address in browser | 00:15 |
roym | ok - let me try that now. | 00:15 |
flox | ur server is behind Apache? or tandalone? | 00:15 |
flox | standalone | 00:15 |
*** srichter has joined #zope3-dev | 00:16 | |
*** batlogg_ has quit IRC | 00:17 | |
roym | it is standalone (twisted). | 00:17 |
roym | I have the same issues w/using an IP address - ie: have to reauth. | 00:17 |
flox | ok | 00:18 |
flox | :-( | 00:18 |
roym | So what you're saying is that if one authenticates to a given skin, then that holds across all skings. | 00:18 |
roym | when you tried it, did you login as a top level user into a PAU enabled site? | 00:19 |
flox | AFAIK ur authentication should not change if u change from one skin to another | 00:20 |
*** dunny has joined #zope3-dev | 00:20 | |
flox | roym: i hv not done exactly ur use case. | 00:21 |
roym | ok - thanks for looking.. I will start w/pdb traces in the auth code to see what's going on. | 00:21 |
flox | i try again, wait | 00:21 |
flox | u use a ZCML user to do ur test, right? | 00:22 |
*** ChanServ sets mode: +o srichter | 00:22 | |
roym | yes - it is zcml user trying to get to a lower level site with its own PAU users. | 00:23 |
roym | (sort of like a site admin). | 00:23 |
roym | flox - If I turn on Unauthorized exceptions tracing, it tells me things like: | 00:24 |
roym | Unauthorized: (<zope.app.publisher.browser.viewmeta.Contents object at 0xa45813ec>, 'browserDefault', 'zope.ManageContent') | 00:25 |
roym | I have never explicitly specified a 'browserDefault' anywhere in my zcml. | 00:25 |
*** pcardune_ has quit IRC | 00:25 | |
flox | roym: on my instance, it does not work at all.... | 00:27 |
flox | i cannot authenticate with ZCML user on my sub-site | 00:28 |
flox | if my sub-site use PAU, with Session-Credentials | 00:28 |
roym | have you moved the plugins to the right? | 00:29 |
flox | i use zope 3.3 | 00:29 |
roym | credentials:basic-auth and session credentials | 00:29 |
flox | yes, my PAU works good for Session Credentials, with my users | 00:29 |
flox | but if PAU is registered, i cannot authenticate with ZCML user... | 00:29 |
roym | that confuses me - wouldn't you expect that your zcml user should be able to visit sites below? | 00:30 |
flox | my ZCML user is just useful for development | 00:31 |
flox | wait, i change my configuration | 00:31 |
flox | bec i registered 2 PAU, one for root '/' and another for '/sub-site/' | 00:32 |
roym | so are you able to visit the sub-site now? | 00:33 |
flox | now i hav only 1 ZCML user, and 1 PAU on the '/sub-site/' that store another user | 00:34 |
flox | and when i visit /++skin++MySkin/A/ i cannot login with the ZCML user | 00:34 |
roym | you have to grant the zcml user rights to your site... | 00:35 |
flox | the ZCML user is zope.Manager... | 00:35 |
flox | he already has right to acces, i assume | 00:36 |
roym | yeah - that should be plenty. | 00:36 |
flox | 1 question, which Zope version? | 00:36 |
flox | and u use 'Session credentials' or 'Basic HTTP Auth' | 00:37 |
roym | I use both 'Session credentials' or 'Basic HTTP Auth' | 00:37 |
roym | and have the latest from trunk. | 00:37 |
roym | sorry s/or/and/ | 00:37 |
roym | it is svn r69408 or later | 00:38 |
flox | ok, mine is the 3.3beta-1 | 00:38 |
roym | ooops - snv r69049 | 00:38 |
flox | i see that something is fixed on authentication for the trunk... | 00:39 |
flox | my version does not have the fix | 00:39 |
flox | - Fixed issue 663, adding basic auth and session-credential plugins didn't work. | 00:39 |
roym | that would explain it. | 00:40 |
roym | :) | 00:40 |
roym | I have found that getting authentication working w/a PAU to be very hard - on the plus side, I now have a better understanding of how this works, though obviously have a ways to go. | 00:40 |
flox | /doc/CHANGES.TXT | 00:40 |
*** zagy has quit IRC | 00:40 | |
flox | i wish that next beta release come soon... | 00:41 |
flox | or i will check from trunk, to upgrade our server, maybe | 00:41 |
roym | maybe then, you can try my use case.. thanks for helping. | 00:41 |
* flox is supporting philiKON idea to have another beta this week | 00:42 | |
philiKON | tomorrow :) | 00:42 |
flox | good news... | 00:42 |
*** russf has quit IRC | 00:52 | |
*** vlado has joined #zope3-dev | 01:00 | |
*** ofer has joined #zope3-dev | 01:14 | |
*** alecm has quit IRC | 01:44 | |
*** ofer has quit IRC | 02:10 | |
*** philiKON has quit IRC | 03:03 | |
*** philiKON has joined #zope3-dev | 03:04 | |
*** wrobel has quit IRC | 03:31 | |
*** romanofski has quit IRC | 03:34 | |
*** philiKON has quit IRC | 03:36 | |
*** yota has quit IRC | 04:36 | |
*** MiUlEr has joined #zope3-dev | 04:42 | |
*** pcardune has joined #zope3-dev | 05:06 | |
*** stub has joined #zope3-dev | 05:35 | |
*** pcardune has quit IRC | 05:54 | |
*** roym has quit IRC | 06:01 | |
*** stub has quit IRC | 07:17 | |
*** zagy has joined #zope3-dev | 10:36 | |
*** stub has joined #zope3-dev | 10:45 | |
*** MiUlEr has quit IRC | 10:52 | |
*** Aiste has quit IRC | 11:37 | |
*** philiKON has joined #zope3-dev | 11:43 | |
*** mexiKON has joined #zope3-dev | 12:20 | |
*** philiKON has quit IRC | 12:23 | |
*** mexiKON is now known as philiKON | 12:23 | |
*** stub has quit IRC | 13:05 | |
*** dunny has quit IRC | 13:05 | |
*** vlado has joined #zope3-dev | 13:38 | |
*** yota has joined #zope3-dev | 13:46 | |
*** batlogg has joined #zope3-dev | 13:49 | |
*** vlado has quit IRC | 13:53 | |
*** vlado has joined #zope3-dev | 13:57 | |
*** vlado has quit IRC | 14:00 | |
*** Aiste has joined #zope3-dev | 14:13 | |
*** romanofski has joined #zope3-dev | 14:26 | |
*** l33t_h4x0r has joined #zope3-dev | 14:30 | |
l33t_h4x0r | i kno more about computas than u all im da best hacker eva | 14:30 |
*** batlogg has quit IRC | 14:36 | |
*** batlogg has joined #zope3-dev | 14:43 | |
*** zagy has quit IRC | 14:43 | |
*** flox is now known as flox|away | 14:47 | |
philiKON | it's ok, we forgive you | 14:48 |
*** Redhatter has joined #zope3-dev | 14:54 | |
*** l33t_h4x0r has left #zope3-dev | 15:03 | |
*** romanofski has quit IRC | 15:06 | |
*** Smokey1 has joined #zope3-dev | 15:24 | |
*** dobee has joined #zope3-dev | 15:25 | |
*** tarek has joined #zope3-dev | 15:29 | |
*** Smokey1 has quit IRC | 15:43 | |
*** dobee has quit IRC | 16:07 | |
*** Redhatter has left #zope3-dev | 16:18 | |
*** xenru|clone has joined #zope3-dev | 16:19 | |
*** xenru has quit IRC | 16:35 | |
*** MiUlEr has joined #zope3-dev | 17:35 | |
*** alecm has joined #zope3-dev | 17:46 | |
*** batlogg has quit IRC | 17:52 | |
*** agroszer has joined #zope3-dev | 18:30 | |
MJ | For anyone using Wing to develop Zope3 projects: | 18:38 |
MJ | http://www.zopatista.com/projects/z3wingdbg | 18:38 |
MJ | :) | 18:38 |
philiKON | MJ, approved your posting | 18:40 |
MJ | Thanks | 18:40 |
*** batlogg has joined #zope3-dev | 18:41 | |
*** zagy has joined #zope3-dev | 18:42 | |
philiKON | hi zagy | 18:42 |
philiKON | you here for some z3 bugsquashing? | 18:42 |
*** pcardune has joined #zope3-dev | 18:46 | |
*** zagy has quit IRC | 18:53 | |
*** romanofski has joined #zope3-dev | 19:40 | |
*** zagy has joined #zope3-dev | 19:41 | |
*** alecm has quit IRC | 19:46 | |
*** alecm has joined #zope3-dev | 19:56 | |
*** pcardune has quit IRC | 20:02 | |
*** zagy has quit IRC | 20:04 | |
*** pcardune has joined #zope3-dev | 20:19 | |
*** tiredbones has quit IRC | 20:20 | |
*** tiredbones has joined #zope3-dev | 20:21 | |
*** philiKON has quit IRC | 20:34 | |
*** zagy has joined #zope3-dev | 20:37 | |
*** rocky has joined #zope3-dev | 20:45 | |
*** timte has joined #zope3-dev | 20:47 | |
*** zagy has quit IRC | 20:57 | |
*** zagy has joined #zope3-dev | 21:03 | |
*** pcardune has quit IRC | 21:04 | |
*** philiKON has joined #zope3-dev | 21:07 | |
*** harobed has joined #zope3-dev | 21:17 | |
*** zagy has quit IRC | 21:23 | |
*** tarek has quit IRC | 21:37 | |
*** dunny has joined #zope3-dev | 21:59 | |
*** jukart has joined #zope3-dev | 22:14 | |
*** efrerich has joined #zope3-dev | 22:14 | |
*** agroszer has quit IRC | 22:19 | |
*** jukart has quit IRC | 22:20 | |
*** alecm has quit IRC | 22:26 | |
*** vlado has joined #zope3-dev | 22:26 | |
*** efrerich has quit IRC | 22:53 | |
*** dobee_ has joined #zope3-dev | 23:07 | |
*** zagy has joined #zope3-dev | 23:07 | |
*** zagy has quit IRC | 23:31 | |
*** pcardune has joined #zope3-dev | 23:32 | |
*** dobee_ has quit IRC | 23:56 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!