[Zope] Re: making authentication permanent?

Tony McDonald tony.mcdonald@ncl.ac.uk
Mon, 10 Jun 2002 15:50:14 +0100


On 10/6/02 3:32 pm, "Florent Guillaume" <fg@nuxeo.com> wrote:

> Please keep the list in Cc, as other people may be interested in this.

Definitely! otherwise you miss things :)

> 
> What's _Zopeid ? You didn't talk about it in your first mail.

It's the default cookie name for Session objects. It has nothing to do with
authentication. It does have a 'data object timeout' value associated with
it, located at /temp_folder/session_data. There is a slot for a script to
call when objects are deleted, but I doubt that this has anything to do with
cookie expiry (although I haven't tried).

Products such as cookiecrumbler and UserDB provide cookie authentication
(login screens). I've not hacked UserDB to provide arbitrarily long login
periods, but it can be done - there's no user interface for it though.

Other products exist for cookie based authentication with timeout -
exUserFolder for example.

Hth,
Tone
-- 
Dr Tony McDonald,  Assistant Director, FMCC, http://www.fmcc.org.uk/
The Medical School, Newcastle University Tel: +44 191 243 6140
A Zope list for UK HE/FE  http://www.fmcc.org.uk/mailman/listinfo/zope