AW: [Zope] Authentication against Win2000 Active Directory

[Jens Vagelpohl]

> LDAPUserFolder has something that it calls "groups" but that everybody
> else in Zope calls "roles" :-)
>

...simply because group records in LDAP have no knowledge of and 
nothing to do with zope roles. "groups" are LDAP records that group 
other records (in this case  user records) together. groups are just 
used by the LDAPUserFolder to map them to real zope roles. it was my 
goal to keep this distinction visible.

hope that cleared it up.

jens