Mailing List Archive: Zope: CMF

How does Zope know the name of the session cookie it should refer to?

Index | Next | Previous | View Threaded

alexman at seas

Apr 8, 2008, 1:37 PM

Post #1 of 3 (298 views)
Permalink

How does Zope know the name of the session cookie it should refer to?

Hi,

My apologies if this isn't the correct mailing list I should post
this question to. Please let me know if I should post on another list.

I'm using Shibboleth as the authentication system in Plone and is
wondering how Zope knows the name of the session cookie it should refer to.

First of all, the software I'm using:
* Zope 2.9.8
* Plone 2.5.5
* Apache 2.2.6
* apachepas 1.2
* ShibbolethLogin 0.6
If a user logs into Plone through the local Plone user account, the
session cookie Plone refers to is

__ac

If a user logs into Plone through Shibboleth, the session cookie
Plone refers to is

_shibsession_XXX

where XXX is a 40-character alphanumeric sequence.

I'm sure something must have told Zope/Plone to refer to the
_shibsession_XXX cookie instead __ac and I'm wondering how that is done.

Does anyone have any idea/hint on this? I'd appreciate any kind of
help. Thanks a lot!

Regards,

Alex

dieter at handshake

Apr 9, 2008, 11:44 AM

Post #2 of 3 (265 views)
Permalink

Re: How does Zope know the name of the session cookie it should refer to? [In reply to]

Alex Man wrote at 2008-4-8 13:37 -0700:
>My apologies if this isn't the correct mailing list I should post
>this question to. Please let me know if I should post on another list.
>
>I'm using Shibboleth as the authentication system in Plone

Maybe, the Plone mailing list might be better.

>and is
>wondering how Zope knows the name of the session cookie it should refer to.

Zope calls the session id "browser id" (do not ask)
and manages (configures) it in its "browser_id_manager".

--
Dieter
_______________________________________________
Zope-CMF maillist - Zope-CMF[at]lists.zope.org
http://mail.zope.org/mailman/listinfo/zope-cmf

See http://collector.zope.org/CMF for bug reports and feature requests

l at lrowe

Apr 10, 2008, 8:49 AM

Post #3 of 3 (261 views)
Permalink

Re: How does Zope know the name of the session cookie it should refer to? [In reply to]

Plone from version 2.5 uses PAS PluggableAuthenticationService. IIRC you
give the plugins an order, so if the shibboleth plugin comes before the
cookie auth plugin then it will `win`.

See: http://plone.org/documentation/manual/pas-reference-manual/

Laurence

Alex Man wrote:
> Hi,
>
> My apologies if this isn't the correct mailing list I should post this
> question to. Please let me know if I should post on another list.
>
> I'm using Shibboleth as the authentication system in Plone and is
> wondering how Zope knows the name of the session cookie it should refer to.
>
> First of all, the software I'm using:
>
> * Zope 2.9.8
> * Plone 2.5.5
> * Apache 2.2.6
> * apachepas 1.2
> * ShibbolethLogin 0.6
>
> If a user logs into Plone through the local Plone user account, the
> session cookie Plone refers to is
>
> *__ac
>
> *If a user logs into Plone through Shibboleth, the session cookie Plone
> refers to is
>
> *_shibsession_XXX
>
> *where XXX is a 40-character alphanumeric sequence.
>
> I'm sure something must have told Zope/Plone to refer to the
> _shibsession_XXX cookie instead __ac and I'm wondering how that is done.
>
> Does anyone have any idea/hint on this? I'd appreciate any kind of help.
> Thanks a lot!
>
> Regards,
>
> Alex
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Zope-CMF maillist - Zope-CMF[at]lists.zope.org
> http://mail.zope.org/mailman/listinfo/zope-cmf
>
> See http://collector.zope.org/CMF for bug reports and feature requests

_______________________________________________
Zope-CMF maillist - Zope-CMF[at]lists.zope.org
http://mail.zope.org/mailman/listinfo/zope-cmf

See http://collector.zope.org/CMF for bug reports and feature requests

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com