Document Actions

httpslogin

Category: Auth and User Management — Other products by this author

This Product enables secure login by replacing Plone's standard cookie based authentication with a session based authentication.

Current release

No stable release available yet.

Experimental releases

Upcoming and alpha/beta/candidate releases

Alpha releases should only be used for testing and development.
Beta releases and Release Candidates are normally released for production testing, but should not be used on mission-critical sites.
Always install on a separate test server first, and make sure you have proper backups before installing.

httpslogin 1.0b1 (Beta release) Released Aug 12, 2006

The first beta release of httpslogin. Has only support for the main login_form, not the portlet yet.

Project Description

Project resources

This Product enables secure login by replacing Plone's standard cookie based authentication with a session based authentication. This is the implementation of the Secure login without plain text passwords. What does this is an implementation mean? Apart from changing the maximum-number-of-session-objects setting in your zope.conf, and setting up HTTPS at least for /login_form in Apache, nothing has to be done. Please refer to the HOWTO for details on how to modify the session setting in zope.conf.

Per default, I will not redirect to HTTPS on login when I'm being accessed as localhost.