Here's some hand-crafting I've done so far:
1. modified acs-tcl/tcl/security-proc.tcl to use old ad_maybe_return_for_redirect code
2. manually modified ad_locales table:
upg=# alter table ad_locales add column enabled_p boolean;
upg=# alter table ad_locales alter column enabled_p set default 't';
3. manually created all of acs-authentication tables:
[apopov@vm:~/prj/HEAD/packages/acs-kernel/sql/postgresql]
<blockquote> psql -f authentication-create.sql upg
</blockquote>
[apopov@vm:~/prj/HEAD/packages/acs-kernel/sql/postgresql]
<blockquote> psql -f authentication-package-create.sql upg
</blockquote>
[apopov@vm:~/prj/HEAD/packages/acs-authentication/sql/postgresql]
<blockquote> psql -f batch-job-tables-create.sql upg
</blockquote>
[apopov@vm:~/prj/HEAD/packages/acs-authentication/sql/postgresql]
<blockquote> psql -f acs-authentication-create.sql upg
</blockquote>
4. sumlinked acs-authentication/tcl/ to acs-tcl/tcl:
[apopov@vm:~/prj/HEAD/packages/acs-tcl/tcl]
<blockquote> ln -s ../../acs-authentication/tcl/* ./
</blockquote>
5. modifying acs-subsite/lib/login.tcl to comment out lookup of UsePasswordWidgetForUsername
This gets me as far as being able to login (sortof), but fails on cc_users.username in one of the selects...