[Zope-dev] SAP SSO for Zope/CookieCrumbler/LDAPUserFolder

[Jens Vagelpohl]

On 27 Jun 2005, at 22:27, Dirk Datzert wrote:

> Hi,
>
> this is my solution for SSO for Zope by accepting SAP-SSO-Ticket.

Apart from the fact that directly patching an existing product is  
never a good idea (subclass and override as needed is a much better  
solution) the creation of external HTTP requests within the product  
code is dangerous. Every time the request hangs (unforeseen network  
hiccup, server unavailable, etc, simple everyday stuff that is beyond  
anyone's control) you will have a hung thread. Four of them and you  
have a hung Zope.

jens