I'm developing a site for my intranet, which already has an established authentication method, WebAuth. I would like to continue using this method as only one login would be required to visit multiple sites on the intranet.
I would like to redirect the user to a website (say http://intranet/cgi-bin/auth?redirect=myweb2pysite ) which displays a form for login, and then redirects if the login was successful By default, the authentication page sets a cookie and value of '48_byte_token:username:reserved_for_future_use'. At the time of login, a row is added to the authtable table in a database. Expiration time is by default 180 days from the time of authentication. Checking the cookie requires matching the token/username combination in the cookie against the token/username/expiration combination in the database. This is the documentation for using it with apache: ============ For applications that can make use of the REMOTE_USER webserver variable, we have a mod_perl2 module that allows for the setting of the REMOTE_USER variable based on the scheme described above. The following httpd.conf configuration is required: <Location /sample_location> AuthName "Foo Bar Authentication" #AuthType Basic #SetHandler perl-script Options +ExecCGI AddHandler cgi-script .cgi #PerlOptions +SetupEnv AuthType Basic PerlAuthenHandler Systems::Auth::ApacheAuthen Require valid-user PerlAuthzHandler Systems::Auth::ApacheAuthz </Location> This will require that any access to /sample_location and beyond will require the cookie above set. If it does, the REMOTE_USER variable will be set in the httpd 'session'; if not, the user will be redirected to the ldapauth login page. ============ I guess im looking for an authenticaion method similar to this: https://docs.djangoproject.com/en/1.6/howto/auth-remote-user/ Any idea if this could be implemented using web2py? or do i have to switch to django :( -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
