> Have you looked at SXIP? (http://sxip.org). Admittedly, you're trying
> to roll your own for single domain/subdomain, but it solves some of the
> "nasty" parts of this (crypto where needed, rootsite for master
> mappings, etc.). There's already a python devkit for membersites, and
> wiring it into Quixote is on my "wannado" list. It may not serve this
> particular purpose, but I think the possibilities are pretty
> intresting...wanted to toss it out to see if anyone else is playing
> with it.

I looked at it. I want to keep everything on my own server, but then
I'd have to install Java servlets and all that Java stuff for the
homesite, right? Prefer not to :)  Thanks for pointing that out.
I also found mod_auth_tkt, sounds good:
http://www.openfusion.com.au/labs/mod_auth_tkt/

--
Ksenia