[Zope-dev] storing passwords

Markus Bengts markus@qvd.fi
Wed, 18 Jun 2003 22:36:43 +0300 (EEST)


Sorry to keep spamming this list. I just want to present a solution if
someone browses the archives.

I installed exUserFolder. And in pgAuthSource.py defined

def remoteAuthMethod(self, username, password):
	to use a Z SQL Method

instead of

remoteAuthMethod=None

It works.

//Markus

On Wed, 18 Jun 2003, Markus Bengts wrote:

> On Mon, 16 Jun 2003, Chris Withers wrote:
>
> > sean.upton@uniontrib.com wrote:
> >
> > > Or SimpleUserFolder: create a user folder class in a Zope product that
> > > subclasses both SimpleUserFolder and OFS.Folder.  Then put ZSQL methods and
> > > a few TTW python scripts in the folder contents of an instance of this class
> > > to make it work.  I've done something similar to this with relative success.
> >
> > Hmmm... I prefer to just put the SQL method in the folder containing the SUF, no
> > need for subclassing and knowing how to write Zope Products then...
> >
>
> I installed SimpleUserFolder and implemented the required methods. I can
> now add and modify users but there is one thing missing. Where do I tell
> Zope how to check the password when users try to authenticate? It should
> be done with:
>
> select * from intrauser
> where username = 'submitted_username'
> and pwdigest = crypt('submitted_password', pwdigest)
>
> The crypt-function is stored in PostgreSQL (a contrib package). In this
> way I can have many programs share the same password database.