Package: zope-exuserfolder (0.50.1-7) [universe]

extensible user authentication product for zope

exUserFolder (sometimes called XUF) is an extensible authentication product for the Zope Application Server. It allows you to choose from a number of methods of authenticating your zope application users, and allows the setting and fetching of arbitrary properties on User objects.

Authentication methods and Property methods do not have to use the same backing store, so it is possible to use legacy user sources, and still have configuration information stored about a user.

exUserFolder supports HTTP Basic Authentication and the so-called Cookie Authentication schemes popular with most webservers.

exUserFolder can also be used for user session tracking, relying on its user credential cache with a reasonably long expiry length.

It is well-respected in the Zope community, and is far easier to use and understand than LoginManager. (Unlike LoginManager, each exUserFolder instance may have only a single authorization source (i.e. the source of valid user names and passwords for that UserFolder) -- most zope applications don't need the complexity offered by LoginManager's multiple-source authorization schemes.)

The following authorization sources are currently supported:

  o Zope ZODB
  o Zope ZODB-Btree
  o etc/passwd (and similarly formatted text files)
  o postgreSQL database
  o mysql (and most other SQL or not-quite-SQL databases)
  o radius
  o smb (samba and samba-workalikes, e.g. Windows)
  o LDAP
  o https
  o 'user-supplied' (roll your own)