Products.PluggableAuthService always queries all authentication plugins

Johannes Raggam <[email protected]>
Newsgroups gmane.comp.web.zope.devel
Message-ID <[email protected]>
when trying to authenticate credentials, all authentication plugins are
queried for the user credentials. the docs say, it stops when the first
user is found:
https://github.com/do3cc/Products.PluggableAuthService/blob/master/Products/PluggableAuthService/doc/framework_overview.stx#L85

but it's implemented differently:
https://github.com/do3cc/Products.PluggableAuthService/blob/master/Products/PluggableAuthService/PluggableAuthService.py#L595 - here the userinfo is added to a userids list, enumerating all activated authentication plugins.


with a admin user defined in in acl_user's source_users authentication
plugin but also having a LDAP authentication plugin ordered after
source_users, it would be convenient to not having to deal with LDAP
connection timeouts, but being authenticated right away.

what's the purpose of having a list of user credentials to be
authenticated anyways?

_______________________________________________
Zope-Dev maillist  -  [email protected]
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )
signature.asc (application/pgp-signature, 181 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEABECAAYFAlTZRmsACgkQW4mNMQxDgAekxgCg4BNX9T2V/UpABWsV69ikNvG4
mJwAnRNJY5J6MHNwkOZGTdDIB9tUfAhr
=p7zo
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.