{ "info": { "author": "4teamwork AG", "author_email": "mailto:info@4teamwork.ch", "bugtrack_url": null, "classifiers": [ "Framework :: Plone", "Framework :: Plone :: 4.2", "Framework :: Plone :: 5.1", "Programming Language :: Python", "Topic :: Software Development :: Libraries :: Python Modules" ], "description": "Introduction\n============\n\n``pas.plugins.trustedproxyauth`` is a PAS plugin for Plone/Zope2 which\nauthenticates requests coming from a trusted reverse proxy where the user name\nis provided by a HTTP header.\n\nThe idea is to delegate user authentication to a reverse proxy (e.g. Apache\nwith mod_auth_kerb) which is placed in front of the Zope instance. For any\nrequest coming from the reverse proxy, the user name is extracted from a\nHTTP header (typically ``X_REMOTE_USER``) that was set by the authenticating\nproxy server.\n\n\nInstallation\n============\n\n- Add ``pas.plugins.trustedproxyauth`` to the list of eggs in your buildout.\n Then rerun buildout and restart your instance.\n\n- In the ZMI go to your acl_users folder and select `Trusted Proxy\n Authentication` from the `Add` menu.\n\n- Activate the `Authentiation` and `Extraction` functionality on the\n `Activate` tab. You may want to change the order of the extraction and\n authentication plugins by moving `Trusted Proxy Authentication` on top.\n\n\nOptions\n=======\n\nThe following mandatory settings must be configured:\n\nTrusted Proxy IPs\n Specify the ip address of your reverse proxy here. Only requests coming\n from a trusted ip will be considered for user name extraction. You can\n specify multiple ip addresses. Defaults to 127.0.0.1.\n\nLogin Name Header\n The name of the HTTP header containing the users login name. This header\n must be set by the authentication proxy. Defaults to ``X_REMOTE_USER``.\n\nRequire Exisiting PAS User\n If disabled, any login name provided in the header is authenticated\n (recommended). If enabled, only login names that can be looked up with PAS\n are authenticated.\n\n``pas.plugins.trustedproxyauth`` supports user name transformations that may\nbe needed in combination with some reverse proxies. The following options are\nsupported:\n\nLowercase Login\n Transform the extracted login name to lowercase.\n\nLowercase Domain\n Transform the domain name part of the extracted login name to lowercase.\n This is useful when using Kerberos authentication and the user id consists\n of ``userid@REALM``.\n\nStrip NT Domain\n Remove the NT domain part from the extracted user name. All user names\n in the form ``DOMAIN\\userid`` are transformed to ``userid``.\n\nStrip AD Domain\n Remove the AD domain part from the extracted user name. All user names\n in the form ``userid@domain`` are transformed to ``userid``.\n\nUser Name Mapping\n Specify a custom user name mapping by providing the extracted user name\n and the mapped user name separated by colon per line.\n\n Example::\n\n user1:guest\n user2:admin\n\n\nLinks\n=====\n\n- Main github project repository:\n https://github.com/4teamwork/pas.plugins.trustedproxyauth\n- Issue tracker:\n https://github.com/4teamwork/pas.plugins.trustedproxyauth/issues\n- Pypi: http://pypi.python.org/pypi/pas.plugins.trustedproxyauth\n- Continuous integration: https://jenkins.4teamwork.ch/search?q=pas.plugins.trustedproxyauth\n\n\nCopyright\n=========\n\nThis package is copyright by `4teamwork `_.\n\n``pas.plugins.trustedproxyauth`` is licensed under GNU General Public License, version 2.\n\nChangelog\n=========\n\n1.3.0 (2019-10-25)\n------------------\n\n- Drop Plone 4.0 and 4.1 support. [jone]\n- Add Plone 5 support. [busykoala]\n\n\n1.2 (2012-06-11)\n----------------\n\n- Added option to emulate Plone logins which includes the creation of member\n areas and firing login events. The feature can be enabled by setting the\n `Plone Login Timeout` option.\n [buchi]\n\n1.1 (2012-04-26)\n----------------\n\n- Added option to verify the user name given in the request header. If\n enabled, only user names that can be looked up with PAS are authenticated.\n [buchi]\n\n- Added a config page for plugin configuration and removed the ZMI\n properties that were used for configuration previously. With this change the\n user name mapping no longer needs to be calculated with each request.\n [buchi]\n\n- Do user name mapping in the extraction part instead of the authenticate part.\n [buchi]\n\n\n1.0.1 (2011-12-13)\n------------------\n\n- Added option to lowercase AD domain part of login.\n [buchi]\n\n- Added username mapping feature for rewriting the username\n provided by the trusted proxy into a known plone username.\n [jbaumann]\n\n- Improved hostname to IP resolution\n [jbaumann]\n\n- Added tests\n [jbaumann]\n\n- Added option to strip NT and AD domains from login.\n [buchi]\n\n\n1.0 (2011-02-25)\n----------------\n\n- Initial release\n [buchi].", "description_content_type": "", "docs_url": null, "download_url": "", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/4teamwork/pas.plugins.trustedproxyauth", "keywords": "pas plugins trusted proxy auth plone", "license": "GPL2", "maintainer": "Thomas Buchberger", "maintainer_email": "", "name": "pas.plugins.trustedproxyauth", "package_url": "https://pypi.org/project/pas.plugins.trustedproxyauth/", "platform": "", "project_url": "https://pypi.org/project/pas.plugins.trustedproxyauth/", "project_urls": { "Homepage": "https://github.com/4teamwork/pas.plugins.trustedproxyauth" }, "release_url": "https://pypi.org/project/pas.plugins.trustedproxyauth/1.3.0/", "requires_dist": null, "requires_python": "", "summary": "Authenticates requests coming from a reverse proxy doing user authentication.", "version": "1.3.0", "yanked": false, "yanked_reason": null }, "last_serial": 13253359, "releases": { "1.1": [ { "comment_text": "", "digests": { "md5": "2248155dab12b3afe62ffe1877fb6aa8", "sha256": "6661965c2137a685e235e034752c0ee1c212c8ce1b27da2f57e80fc8c2e84592" }, "downloads": -1, "filename": "pas.plugins.trustedproxyauth-1.1.tar.gz", "has_sig": false, "md5_digest": "2248155dab12b3afe62ffe1877fb6aa8", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 18240, "upload_time": "2012-04-26T14:43:16", "upload_time_iso_8601": "2012-04-26T14:43:16.796788Z", "url": "https://files.pythonhosted.org/packages/5e/30/31337107a8132591d64102bd76d62e5eda5eafb079194624f9a60cf3bbd9/pas.plugins.trustedproxyauth-1.1.tar.gz", "yanked": false, "yanked_reason": null } ], "1.2": [ { "comment_text": "", "digests": { "md5": "6e7e758dd736e0bdaee97904e4397ae5", "sha256": "b2da9680f1f983b985586590e8992f014e68bf50e49abcffaa271fee24a02555" }, "downloads": -1, "filename": "pas.plugins.trustedproxyauth-1.2.tar.gz", "has_sig": false, "md5_digest": "6e7e758dd736e0bdaee97904e4397ae5", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19118, "upload_time": "2012-06-11T15:03:55", "upload_time_iso_8601": "2012-06-11T15:03:55.990404Z", "url": "https://files.pythonhosted.org/packages/55/6a/738ac5541e0474cd227574d838f12079c1a4a27bac1ca77db411b3706697/pas.plugins.trustedproxyauth-1.2.tar.gz", "yanked": false, "yanked_reason": null } ], "1.3.0": [ { "comment_text": "", "digests": { "md5": "0941432dd38d3b85eeb71ed6fde6e29b", "sha256": "8b0da743632d5752d6af22705587869477fbb7b98a3d60ca77ab902e6c4268ee" }, "downloads": -1, "filename": "pas.plugins.trustedproxyauth-1.3.0.tar.gz", "has_sig": false, "md5_digest": "0941432dd38d3b85eeb71ed6fde6e29b", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19702, "upload_time": "2019-10-25T06:42:14", "upload_time_iso_8601": "2019-10-25T06:42:14.945010Z", "url": "https://files.pythonhosted.org/packages/3c/5d/483f33decbde7d255b18e9bffa349d06bbc97613177d2b69a42b556a6580/pas.plugins.trustedproxyauth-1.3.0.tar.gz", "yanked": false, "yanked_reason": null } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "0941432dd38d3b85eeb71ed6fde6e29b", "sha256": "8b0da743632d5752d6af22705587869477fbb7b98a3d60ca77ab902e6c4268ee" }, "downloads": -1, "filename": "pas.plugins.trustedproxyauth-1.3.0.tar.gz", "has_sig": false, "md5_digest": "0941432dd38d3b85eeb71ed6fde6e29b", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19702, "upload_time": "2019-10-25T06:42:14", "upload_time_iso_8601": "2019-10-25T06:42:14.945010Z", "url": "https://files.pythonhosted.org/packages/3c/5d/483f33decbde7d255b18e9bffa349d06bbc97613177d2b69a42b556a6580/pas.plugins.trustedproxyauth-1.3.0.tar.gz", "yanked": false, "yanked_reason": null } ], "vulnerabilities": [] }