PAULA: bringing Zope 3's authentication to Plone and beyond

15 Messages Forum Options Options
Permalink
Florian Friesdorf-2
PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Hi *,

within the scope of google summer of code I am integrating zope 3's PAU with
Plone's PAS and further enable (non-AT) content objects as source for users and
groups. All functionality is developed in pure zope3, the plone integration is
happening in a separate packages.

All documents describing the project, as well as links to the code can be found
here:

https://chaoflow.net/projects/gsoc2008/z3membrane-ldap

The code is not very interesting right now, but now would be the time to take
any influence on what will be created during the next month - I am planning to
continue to work on the project after the SoC.

I will keep you updated on major advancements of the code.

regards
florian


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers

attachment0 (204 bytes) Download Attachment
Wichert Akkerman
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Previously Florian Friesdorf wrote:

> Hi *,
>
> within the scope of google summer of code I am integrating zope 3's PAU with
> Plone's PAS and further enable (non-AT) content objects as source for users and
> groups. All functionality is developed in pure zope3, the plone integration is
> happening in a separate packages.
>
> All documents describing the project, as well as links to the code can be found
> here:
>
> https://chaoflow.net/projects/gsoc2008/z3membrane-ldap

The one thing I am missing is: why? PAS works fine and covers a lot more
functionality than PAU and there are more PAS plugins than PAU plugins.
It's also perfectly possible to use non-AT content as source for users
with PAS as well as tools such as b-org demonstrate.

Wichert.

--
Wichert Akkerman <wichert@...>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Philipp von Weitershausen
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Wichert Akkerman wrote:

> Previously Florian Friesdorf wrote:
>> Hi *,
>>
>> within the scope of google summer of code I am integrating zope 3's PAU with
>> Plone's PAS and further enable (non-AT) content objects as source for users and
>> groups. All functionality is developed in pure zope3, the plone integration is
>> happening in a separate packages.
>>
>> All documents describing the project, as well as links to the code can be found
>> here:
>>
>> https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
>
> The one thing I am missing is: why? PAS works fine and covers a lot more
> functionality than PAU and there are more PAS plugins than PAU plugins.
> It's also perfectly possible to use non-AT content as source for users
> with PAS as well as tools such as b-org demonstrate.

Exactly. I don't mean to pee on anybody's parade here, but IMHO Wichert
is right. To be constructive, I think it'd be much more interesting to
investigate hooking Plone up to an external authentication mechanism
such as repoze.who.


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Wichert Akkerman
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Previously Philipp von Weitershausen wrote:

> Wichert Akkerman wrote:
> > Previously Florian Friesdorf wrote:
> >> Hi *,
> >>
> >> within the scope of google summer of code I am integrating zope 3's PAU with
> >> Plone's PAS and further enable (non-AT) content objects as source for users and
> >> groups. All functionality is developed in pure zope3, the plone integration is
> >> happening in a separate packages.
> >>
> >> All documents describing the project, as well as links to the code can be found
> >> here:
> >>
> >> https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
> >
> > The one thing I am missing is: why? PAS works fine and covers a lot more
> > functionality than PAU and there are more PAS plugins than PAU plugins.
> > It's also perfectly possible to use non-AT content as source for users
> > with PAS as well as tools such as b-org demonstrate.
>
> Exactly. I don't mean to pee on anybody's parade here, but IMHO Wichert
> is right. To be constructive, I think it'd be much more interesting to
> investigate hooking Plone up to an external authentication mechanism
> such as repoze.who.

Doesn't repoze already have a PAS plugin to do just that?

Wichert.

--
Wichert Akkerman <wichert@...>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Philipp von Weitershausen
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Wichert Akkerman wrote:

> Previously Philipp von Weitershausen wrote:
>> Wichert Akkerman wrote:
>>> Previously Florian Friesdorf wrote:
>>>> Hi *,
>>>>
>>>> within the scope of google summer of code I am integrating zope 3's PAU with
>>>> Plone's PAS and further enable (non-AT) content objects as source for users and
>>>> groups. All functionality is developed in pure zope3, the plone integration is
>>>> happening in a separate packages.
>>>>
>>>> All documents describing the project, as well as links to the code can be found
>>>> here:
>>>>
>>>> https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
>>> The one thing I am missing is: why? PAS works fine and covers a lot more
>>> functionality than PAU and there are more PAS plugins than PAU plugins.
>>> It's also perfectly possible to use non-AT content as source for users
>>> with PAS as well as tools such as b-org demonstrate.
>> Exactly. I don't mean to pee on anybody's parade here, but IMHO Wichert
>> is right. To be constructive, I think it'd be much more interesting to
>> investigate hooking Plone up to an external authentication mechanism
>> such as repoze.who.
>
> Doesn't repoze already have a PAS plugin to do just that?

Ah, that's right: http://svn.agendaless.com/Products.whoopass. That
doesn't mean it could be integrated better, though, for instance UI-wise...


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Florian Friesdorf-2
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
On Thu, Jul 10, 2008 at 10:56:19PM +0200, Wichert Akkerman wrote:

> Previously Florian Friesdorf wrote:
> > Hi *,
> >
> > within the scope of google summer of code I am integrating zope 3's PAU with
> > Plone's PAS and further enable (non-AT) content objects as source for users and
> > groups. All functionality is developed in pure zope3, the plone integration is
> > happening in a separate packages.
> >
> > All documents describing the project, as well as links to the code can be found
> > here:
> >
> > https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
>
> The one thing I am missing is: why?
Well, Zope moved onwards from PAS to PAU and I think Plone should too, because:
- PAU is way more pythonic and cleaner than PAS/PlonePAS, it is easier to write
  stuff for PAU;
- we should use as much as possible of Zope3 and avoid custom solutions,
  increasing the mutual benefit of all Zope3-based projects.

I am writing a PlonePAS plugin, that makes the world of PAU available to Plone,
i.e.  we can profit from whatever is available for PAU right now and becomes
available in the future.  Further, I am enabling pure zope3 content as source
for users and groups, not only usable for Plone, but for all Zope3-based
projects. And the resulting code is cleaner and easier to maintain and
understand.

For me, it is more a question of: why not?

> PAS works fine and covers a lot more functionality than PAU and there are more
> PAS plugins than PAU plugins.

PAU is doing things different than PlonePAS/PAS, but I don't see how the current
functionality of PlonePAS/PAS could not be achieved with PAU?

Yes, there are a lot more plugins for PAS than for PAU, but that does not
contradict, writing another PAS plugin, that makes all future auth plugin
writing easier. Whether PAU could/should replace PlonePAS/PAS at some point, is
a completely different story.

> It's also perfectly possible to use non-AT content as source for users
> with PAS as well as tools such as b-org demonstrate.

At least, two months ago, when I started with my project, membrane did not
support non-AT content and I don't know of any other project doing it; b-org is
all archetypes.


florian


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers

attachment0 (204 bytes) Download Attachment
Florian Friesdorf-2
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
On Thu, Jul 10, 2008 at 05:01:49PM -0400, Philipp von Weitershausen wrote:

> Wichert Akkerman wrote:
> > Previously Florian Friesdorf wrote:
> >> Hi *,
> >>
> >> within the scope of google summer of code I am integrating zope 3's PAU with
> >> Plone's PAS and further enable (non-AT) content objects as source for users and
> >> groups. All functionality is developed in pure zope3, the plone integration is
> >> happening in a separate packages.
> >>
> >> All documents describing the project, as well as links to the code can be found
> >> here:
> >>
> >> https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
> >
> > The one thing I am missing is: why? PAS works fine and covers a lot more
> > functionality than PAU and there are more PAS plugins than PAU plugins.
> > It's also perfectly possible to use non-AT content as source for users
> > with PAS as well as tools such as b-org demonstrate.
>
> Exactly. I don't mean to pee on anybody's parade here, but IMHO Wichert
> is right. To be constructive, I think it'd be much more interesting to
> investigate hooking Plone up to an external authentication mechanism
> such as repoze.who.
The main goal of the project is: to enable non-AT content as source for users
and groups! On that base it was accepted as a GSOC project for Plone.

The original idea was to extend membrane; after looking into it more closely, my
mentor (Jens W. Klein) and me agreed, that doing it from scratch, using PAU is
easier, future plugin writing will be easier and the whole Zope3 community could
benefit from it, too. That is why the original proposal was discussed only on
plone-dev and why I sent the mail now to zope-dev as well.

Nobody has to use it later ;) but the circle of people who could benefit from my
project, if they would like to, is definitely bigger doing it via PAU. And those
people who want non-AT content-based users and groups, will get a fully
functional PAU as well, which again they don't need to use for anything further,
if they don't want to...


florian


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers

attachment0 (204 bytes) Download Attachment
Andreas Jung-5
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink


--On 11. Juli 2008 18:04:16 -0700 Florian Friesdorf <flo@...>
wrote:

> On Thu, Jul 10, 2008 at 10:56:19PM +0200, Wichert Akkerman wrote:
>> Previously Florian Friesdorf wrote:
>> > Hi *,
>> >
>> > within the scope of google summer of code I am integrating zope 3's
>> > PAU with Plone's PAS and further enable (non-AT) content objects as
>> > source for users and groups. All functionality is developed in pure
>> > zope3, the plone integration is happening in a separate packages.
>> >
>> > All documents describing the project, as well as links to the code can
>> > be found here:
>> >
>> > https://chaoflow.net/projects/gsoc2008/z3membrane-ldap
>>
>> The one thing I am missing is: why?
>
> Well, Zope moved onwards from PAS to PAU and I think Plone should too,
> because:
>- PAU is way more pythonic and cleaner than PAS/PlonePAS, it is
> easier to write   stuff for PAU;
More pythonic or not...writing a PAS plugin is fairly easy and trivial.
We have to maintain APIs that we were using for a long time for the sake
of backward compatibility (for the sake of plone users and the sake of
plone PAS developers).  I want API stability. I don't want to change my
code just because someone means that a layer would be nice. We already have
enough various spots in side Plone where you have at least two choice for
implementing things with different technologies..please not yet another
such spot.

Andreas

> - we should use as much as possible of Zope3 and avoid custom solutions,
>   increasing the mutual benefit of all Zope3-based projects.


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers

attachment0 (201 bytes) Download Attachment
Martin Aspeli-2
[Zope-dev] Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Mark Hammond wrote:
>> Well, Zope moved onwards from PAS to PAU and I think Plone should too,
>> because:
>
> It seems like just yesterday that PAS offered the promise of being the nice
> clean way forward for authentication, and even offered a path to Zope3.
> I've been subscribed to zope-dev since then, but somehow the anointing of
> PUA escaped my attention.

I think you've misunderstood slightly here ... PAS was and is a Zope 2
user folder implementation. It pre-dates Zope 3 (at least as we know it
now).

PAU is a Zope 3 authentication infrastructure. I suspect it's inspired
by PAS, but it isn't "PAS 2.0", or an "anointed successor" to PAS.

I find it interesting that Florian is planning to make it possible to
use PAU utilities in PAS. I'm somewhat less convinced that it would be
difficult to make membrane AT-independent. There isn't much AT specific
stuff in membrane, as far as I can recall.

I can't make a judgement as to whether PAU could bring additional
benefits, though.

Martin

--
Author of `Professional Plone Development`, a book for developers who
want to work with Plone. See http://martinaspeli.net/plone-book

_______________________________________________
Zope-Dev maillist  -  Zope-Dev@...
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Tres Seaver
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark Hammond wrote:
>> Well, Zope moved onwards from PAS to PAU

I doubt that seriously:  I would venture that there are two orders of
magnitude more users of PAS than PAU in production deployments.  PAU was
an attempt to port the PAS to a "component-centric" implementation, but
it lost at least a couple of key features along the way:  most notably,
the ZCA provides no way to control the ordering of the invocation of the
plugins.

> and I think Plone should too,

- -1.  I can see no benefit, except the myth (in the technical,
anthropological sense) that a Z3-based rewrite of any arbitrary
component must be superior to the thing it rewrites.

>> because:
>
> It seems like just yesterday that PAS offered the promise of being the nice
> clean way forward for authentication, and even offered a path to Zope3.
> I've been subscribed to zope-dev since then, but somehow the anointing of
> PUA escaped my attention.
>
> It seems like plenty of people in these -dev communities aren't aware the
> world has shifted again under them, so I pity the poor soul who attempts to
> use/install/configure this software.

PlonePAS still has some rough edges, as do some of the available
plugins, but the underlying PAS is still a pretty nice way to do "local"
user folders.

>> I am writing a PlonePAS plugin, that makes the world of PAU available
>> to Plone
>
> Hopefully you will finish by the time PAU is considered
> ugly/unpythonic/whatever enough to replace <wink/sigh>
>
> The sands constantly shifting under our feet sounds like a much bigger
> problem than whatever was wrong with PAS, or whatever will be decided is
> wrong with PUA (and repeat ad-nauseam for the variety of successors.)

Heh, you sound almost as much like an "old fart" as I do. :)



Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver@...
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIePdV+gerLs4ltQ4RAqUyAJ0VVg2n2xydtNwlMR2WvF8JAJKoXQCfa60M
Mrsp26qNnmHxOkjsG90SaJ8=
=e2pa
-----END PGP SIGNATURE-----


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Martin Aspeli-2
[Zope-dev] Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Mark Hammond wrote:

>> I think you've misunderstood slightly here ... PAS was and is a Zope 2
>> user folder implementation. It pre-dates Zope 3 (at least as we know it
>> now).
>
> I was referring to the thread at
> http://mail.zope.org/pipermail/zope-pas/2004-September/000086.html, entitled
> "[Zope-PAS] Challengers (and Zope 3)" - but I do admit I haven't been
> keeping a close eye on Zope3 since then so things may have changed (but the
> claim PAS predates Zope 3 seems suspect in the context of that thread,
> unless Zope 3 has changed since then in a way it no longer means Zope 3 ;)

Sorry, I may've gotten my history mixed up a little here, but in any
case, I think the point remains: no-one's said (nor not said) that PAS
is to be deprecated in favour of PAU in a Zope 2/CMF/Plone context at
least. So I don't think you missed that. ;-)

Martin

--
Author of `Professional Plone Development`, a book for developers who
want to work with Plone. See http://martinaspeli.net/plone-book

_______________________________________________
Zope-Dev maillist  -  Zope-Dev@...
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Wichert Akkerman
Re: [Zope-dev] Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Previously Mark Hammond wrote:

> Martin quoting me:
>
> > > I was referring to the thread at
> > > http://mail.zope.org/pipermail/zope-pas/2004-September/000086.html,
> > > entitled "[Zope-PAS] Challengers (and Zope 3)"
> ...
>
> > Sorry, I may've gotten my history mixed up a little here, but in any
> > case, I think the point remains: no-one's said (nor not said) that PAS
> > is to be deprecated in favour of PAU in a Zope 2/CMF/Plone context at
> > least. So I don't think you missed that. ;-)
>
> Thanks for the clarification.
>
> However, while not wanting to extend this debate any more than necessary,
> I'm still wondering if *my* point remains valid in the broader "zope x"
> context:
>
> Is PAS still alive and preferred for Zope3?  Or more generally, is there any
> reasonable strategy for sticking with PAS in Zope2 while also keeping the
> door open to Zope3?  I hope so - but I fear that for fairly obscure reasons
> Zope2 and Zope3 have diverged in this specific area, in a way that isn't in
> the long term interests of people investing in Zope technologies...

Zope3 has never supported PAS and I doubt it ever well. Zope2 has never
supported PAU and the Zope2 world in general seems to be quiet happy
with sticking to PAS. Since Zope3 is not a successor to Zope2 but a
completely different thing I do not think this is problematic.

Wichert.

--
Wichert Akkerman <wichert@...>    It is simple to make things.
http://www.wiggy.net/                   It is hard to make things simple.

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Andreas Jung-5
Re: [Zope-dev] Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink


--On 13. Juli 2008 19:38:01 +0300 Mark Hammond <mhammond@...>
wrote:


>
>> Since Zope3 is not a successor to Zope2 but a
>> completely different thing I do not think this is problematic.
>
> That too seems a shame to me.  So if I found myself with an investment in
> Zope2 but was looking to the future, Zope3 will not even *attempt* to
> provide a smoother path for me than, say, moving to django or another
> alternative framework?

How about GROK?

>
> I guess the fact the first 4 letters of "zope2" and "zope3" being the same
> did imply some sense of continuation in at least *some* things...

That's reason why the term "zope 3" should be phased out and replaced with
"Zope web components" or something similar. You're not the only one being
confused by this.

-aj

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers

attachment0 (201 bytes) Download Attachment
Tres Seaver
Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark Hammond wrote:

>> Zope3 has never supported PAS and I doubt it ever well.
>
> That is a shame - the thread I referred to shows that Jim was working on
> exactly that - it's a shame that never came to fruition (and indeed, its not
> clear why that attempt failed - should PAS have been fixed to make that
> transition possible?)
>
>> Since Zope3 is not a successor to Zope2 but a
>> completely different thing I do not think this is problematic.
>
> That too seems a shame to me.  So if I found myself with an investment in
> Zope2 but was looking to the future, Zope3 will not even *attempt* to
> provide a smoother path for me than, say, moving to django or another
> alternative framework?
>
> I guess the fact the first 4 letters of "zope2" and "zope3" being the same
> did imply some sense of continuation in at least *some* things...

The original intent was to allow for transparent migration:  the end
result has been that Zope2 *uses* selected bits of Zope3, with no intent
 (going forward) that Zope2 will "wither away."  Rather, we are
gradually replacing various bits of Z2, where appropriate, with the Z3
equivalents.

The entire debate here is about whether PAU is really an appropriate
replacement for PAS, given that it doesn't support some use cases out of
the box, and has a smaller set of available plugins.

> (or, as usual, I may be missing something that is obvious to those closer to
> the metal than me as a somewhat external observer)

I wouldn't call the current state obvious. ;)


Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver@...
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIejjk+gerLs4ltQ4RAnlWAJ48nu1VCyDIgmKs90xtT0uIZcG1YQCeJLDF
Bmw9fc+PXq/JhJFLmrTERZg=
=odMI
-----END PGP SIGNATURE-----


-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers
Philipp von Weitershausen
[Zope-dev] Re: PAULA: bringing Zope 3's authentication to Plone and beyond
Reply Threaded More
Print post
Permalink
Tres Seaver wrote:
> Mark Hammond wrote:
>>> Well, Zope moved onwards from PAS to PAU
>
> I doubt that seriously:  I would venture that there are two orders of
> magnitude more users of PAS than PAU in production deployments.  PAU was
> an attempt to port the PAS to a "component-centric" implementation, but
> it lost at least a couple of key features along the way:  most notably,
> the ZCA provides no way to control the ordering of the invocation of the
> plugins.

The ZCA may have no built-in way to control the ordering, but PAU surely
does control the ordering. It keeps an ordered list of plugin names.
These plugins can either be contained items in the PAU (like in PAS) or
utilities for ICredentialsPlugin or IAuthenticatorPlugin.

_______________________________________________
Zope-Dev maillist  -  Zope-Dev@...
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Plone-developers mailing list
Plone-developers@...
https://lists.sourceforge.net/lists/listinfo/plone-developers