Personal tools
You are here: Home → Documentation → Manuals → PAS reference manual
Support

Get Help

Join our chat rooms or support forums if you have more specific questions.

Plone Training
Learn how to design, build, and deploy a website in Plone through one of the numerous Plone training sessions around the world.
Find Plone training…
 
Document Actions

PAS reference manual

This Reference Manual applies to: Plone 2.5.x
This Reference Manual is intended for: Site Administrators, Developers

This reference manual documents the Pluggable Authentication Service (PAS), which is used by Plone 2.5 and later for user management. This manual is aimed towards administrators who need to configure user management in a Plone site and towards developers who are interested in PAS plugins.

All content on one page (useful for printing, presentation mode etc.)

  1. Introduction
  2. Using PAS
    1. Features and interfaces
    2. The important interfaces
    3. Configuring PAS
    4. Configuring an individual PAS plugin
  3. Developing for PAS
    1. Concepts
    2. The user object
      1. The user object
      2. User creation
      3. User factory plugin
      4. Properties plugins
      5. Group plugins
      6. Roles plugin
    3. Authorisation process
      1. Authorisation algorithm
      2. Credential extraction
      3. Credential authentication
      4. Challenges
    4. Caveats
      1. PAS eats exceptions
by Wichert Akkerman — last modified March 28, 2007 - 00:06 All content is copyright Plone Foundation and the individual contributors.

Great start, but...

Posted by Stan McFarland at April 3, 2007 - 16:22
Wichert, this is a great start, but there a couple of basic things missing that I hope you could add. For instance, if I want to write my own extraction plugin, where does it go, and how to you get the ZMI to see it? I wrote a simple plugin and placed it in the Products/PluggableAuthService/plugins directory, restarted my server, but the module doesn't appear in the list of Extraction plugins, and it also doesn't appear to have even been compiled. Am I missing something?

Missing essentials

Posted by Wichert Akkerman at April 3, 2007 - 20:25
What you are missing is the fact that a PAS plugin is a normal Zope object, so all the usual Zope magic is needed: creating an object factory, ZMI add form, registering the content type, etc.

I'll try to work that into the next revision of the manual.

Thanks, Wichert.

Posted by Stan McFarland at April 4, 2007 - 13:47
I installed the GMailAuthentication Plugin - as advertised, it serves as a nice skeleton.

Example plugins

Posted by Wichert Akkerman at April 4, 2007 - 13:51
In terms of example plugins the NoGoChallenger (also on plone.org/products) is an even simpler example / skeleton.

Great work

Posted by Gilles Lenfant at April 30, 2007 - 14:12
I would add that caching PAS and/or plugins with a RAM cache is essential on production sites, where properties and role plugins are frequently executed.

Of course do not activate this cache unless your PlonePAS customisation is tested.

For any issues with the web site functionality, please file a ticket.

Please consult the policy on plone.org content if you want your content published on this site.

Servers and hosting by