Personal tools
You are here: Home catalog Products.EnfoldWindowsPlugins
Log in


Forgot your password?
 

Products.EnfoldWindowsPlugins

Windows Authentication Plugins for PAS

Current release
Products.EnfoldWindowsPlugins 4.1.1

Released Jun 17, 2011

Download file Get Products.EnfoldWindowsPlugins for All platforms (36.7 kB)
Products.EnfoldWindowsPlugins-4.1.1.tar.gz
Download file Get Products.EnfoldWindowsPlugins for All platforms (52.2 kB)
Products.EnfoldWindowsPlugins-4.1.1.zip
Download file Get Products.EnfoldWindowsPlugins for All platforms (70.3 kB)
Products.EnfoldWindowsPlugins-4.1.1-py2.6.egg

Project Description

Enfold Windows Plugins

Goals

There are 3 primary objects in this package:

  1. Windows ADSI User Folder: a drop-in replacement for LDAPUserFolder.
  2. Windows ADSI Multi Plugin: allows the Windows ADSI User Folder to work with PAS.
  3. Windows SSPI/NTLM Authentication Plugin: an authentication plugin for PAS.

All of these packages require that the Windows box being installed on is a member of a Windows domain. It will not work for Windows workstations in a simple workgroup.

Installation

You need to install the following packages for your Plone site:

  1. PluggableAuthService (http://cvs.zope.org/Products/PluggableAuthService/)
  2. LDAPMultiPlugin (http://www.dataflake.org/software/ldapmultiplugins/)
  3. LDAPUserFolder (http://www.dataflake.org/software/ldapuserfolder/)
  4. PluginRegistry (http://cvs.zope.org/Products/PluginRegistry/)

You also need a recent pywin32 (http://sourceforge.net/projects/pywin32/) build.

Configuration

Configuring for ADSI User Folder (non PAS)

This product will make a "Windows ADSIUserFolder" available - it should appear anywhere that an LDAPUserFolder appears. It should be able to be used in place of an LDAPUserFolder.

When you add an ADSIUserFolder, you generally will not need to make any changes to the configuration screens. Once added, it should "just work".

Configuring for ADSI User Folder (non PAS)

The process for PAS is almost identical - except in this case, you will be adding the ADSI support via PAS itself. For PAS you must add the "Windows ADSI multi-plugin", but the process itself is identical as above.

Configuring for SSPI authentication (PAS)

  • Add a PAS.
  • Inside the PAS, you should have options to add a "Windows SSPI/NTLM Authentication". Add one.
  • Click on the newly added SSPI object - you should be presented with the list of interfaces implemented (Challenge, Extract and Authenticate).
  • Challenge and Extract must be both enabled, or both disabled - this is what gives you NTLM authentication.
  • Authentication means that any username/password pairs extracted by other means (cookies, HTTP basic auth) will be validated by this plugin.

Note: You will also see a "ActiveDirectory Multi Plugin" - that is not the one you should use.

4.1.1 (2011-06-17)

  • Fix default domain with cookie authentication

4.1.0 (2011-06-15)

  • Allow to use hardoced domain name.

4.0.1 (2010-05-05)

  • added Trove classifiers
  • SYSTEMSINTERNAL-370, SYSTEMSINTERNAL-371, SYSTEMSINTERNAL-372, SYSTEMSINTERNAL-373: prepared product for being open sourced [Raj Shah]
« May 2012 »
May
MonTueWedThuFriSatSun
123456
78910111213
14151617181920
21222324252627
28293031