Who's this patch is for

The patch provided here is for Plone users, or for GroupUserFolder Users.

What this patch provides

This micro-patch comments two lines in GRUF, allowing then to authenticate users without sending browser-side credentials. (i.e the validate() method is modified)

This patch is mandatory to use CASUserFolder into a GroupUserFolder (version <= 3.1.1)

Patch content:

    --- GroupUserFolder-3.1.1/GroupUserFolder.py    2004-09-06 11:44:47.000000000 +0200
    +++ GroupUserFolder-3.1.1-patched-CASUserFolder-1.0/GroupUserFolder.py  2005-02-21 02:29:39.000000000 +0100
    @@ -963,12 +963,12 @@
             in AccessControl/User.py.
             We also check for inituser in there.
             """
             # Emergency user checking stuff
             emergency = self._emergency_user
    -        if name is None:
    -            return None
    +#PATCH        if name is None:
    +#PATCH            return None
             if emergency and name==emergency.getUserName():
                 if emergency.authenticate(password, request):
                     return emergency
                 else:
                     return None

How to patch

commands:

    cd  $ZOPE/lib/python/Products/GroupUserFolder
    patch -p1 < /tmp/GroupUserFolder-3.1.1-CASUserFolder-1.0.patch