Your message dated Thu, 17 Aug 2006 02:17:21 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#357461: fixed in zope3 3.2.1-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: python2.4-schoolbell
Version: 1.2.4-1
Severity: normal


Hello,

I wonder is this a zope3 bug or a urllib2, probably the former.
Anyway while trying to connect with urllib2 to a schoolbell server
with authentication every request failed.

After a while I noticed that urllib2 used this regexp to search the
realm:

        re.compile('[ \t]*([^ \t]+)[ \t]+realm="([^"]*)"', re.I)

While zope3 sends these headers:

[EMAIL PROTECTED] ~ % wget -S http://192.168.1.3:7180/persons/nev/calendar.ics
--14:57:06--  http://192.168.1.3:7180/persons/nev/calendar.ics
           => `calendar.ics.1'
Connexion vers 192.168.1.3:7180...connecté.
requête HTTP transmise, en attente de la réponse...
  HTTP/1.0 401 Unauthorized
  Content-Length: 2484
  Connection: Keep-Alive
  X-Powered-By: Zope (www.zope.org), Python (www.python.org)
  Date: Fri, 17 Mar 2006 13:57:15 GMT
  Content-Type: text/html;charset=utf-8
  WWW-Authenticate: basic realm=zope
  Server: zope.server.http (HTTP)
ÉCHEC d'autorisation.

Notice the " missing around the word zope.

Well, I've read the rfc it seems the " are mandatory.

Here's a simple patch against zope/app/security/basicauthadapter.py

--- basicauthadapter.py 2006-03-17 15:11:30.000000000 +0100
+++ basicauthadapter.py.mine    2006-03-17 15:12:10.000000000 +0100
@@ -37,4 +37,4 @@
         LoginPassword.__init__(self, login, password)
 
     def needLogin(self, realm):
-        self.__request.unauthorized("basic realm=%s" % realm)
+        self.__request.unauthorized('basic realm="%s"' % realm)

I think the doctest and so on needs patches too.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-k7
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)

Versions of packages python2.4-schoolbell depends on:
ii  python2.4                2.4.2-2         An interactive high-level object-o
ii  python2.4-libxml2        2.6.23.dfsg.2-2 Python 2.4 bindings for the GNOME 
ii  python2.4-reportlab      1.20debian-3    ReportLab library to create PDF do
ii  python2.4-xml            0.8.4-2         XML tools for Python (2.4.x)
ii  zope3                    3.2.0-4         Open Source Web Application Server

python2.4-schoolbell recommends no packages.

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: zope3
Source-Version: 3.2.1-5

We believe that the bug you reported is fixed in the latest version of
zope3, which is due to be installed in the Debian FTP archive:

python-zopeinterface_3.2.1-5_i386.deb
  to pool/main/z/zope3/python-zopeinterface_3.2.1-5_i386.deb
zope3-doc_3.2.1-5_all.deb
  to pool/main/z/zope3/zope3-doc_3.2.1-5_all.deb
zope3-sandbox_3.2.1-5_all.deb
  to pool/main/z/zope3/zope3-sandbox_3.2.1-5_all.deb
zope3_3.2.1-5.diff.gz
  to pool/main/z/zope3/zope3_3.2.1-5.diff.gz
zope3_3.2.1-5.dsc
  to pool/main/z/zope3/zope3_3.2.1-5.dsc
zope3_3.2.1-5_i386.deb
  to pool/main/z/zope3/zope3_3.2.1-5_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Fabio Tranchitella <[EMAIL PROTECTED]> (supplier of updated zope3 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 17 Aug 2006 10:55:03 +0200
Source: zope3
Binary: python-zopeinterface zope3 zope3-sandbox zope3-doc
Architecture: source i386 all
Version: 3.2.1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian/Ubuntu Zope Team <[EMAIL PROTECTED]>
Changed-By: Fabio Tranchitella <[EMAIL PROTECTED]>
Description: 
 python-zopeinterface - The implementation of interface definitions for Zope 3
 zope3      - Open Source Web Application Server (Libraries)
 zope3-doc  - Documentation for Zope3
 zope3-sandbox - sandbox instance for the zope3 web application server
Closes: 357461 378030
Changes: 
 zope3 (3.2.1-5) unstable; urgency=medium
 .
   * debian/patches/twisted-bug.dpatch: fixes a buggy override for a twisted
     method. Without this patch, zope3 doesn't work at all: set urgency
     to medium. (Closes: #378030)
   * debian/patches/malformed-realm.dpatch: fixes malformed realms.
     (Closes: #357461)
Files: 
 0d0a7390cd70cf812563c58eea8499c4 893 web optional zope3_3.2.1-5.dsc
 78c6299c9e5a662d1c974391197ace6f 14531 web optional zope3_3.2.1-5.diff.gz
 a445ca2d6d60388371f77016d5800177 4139296 python optional zope3_3.2.1-5_i386.deb
 4131e85d86df1f8e55fc4cab4b1240f6 119938 python optional 
python-zopeinterface_3.2.1-5_i386.deb
 c2aa3850c549d11c0cd720dcfc63086c 219984 doc optional zope3-doc_3.2.1-5_all.deb
 22e36ccf57928f073e8f24eaf9bf8c7a 39396 web optional 
zope3-sandbox_3.2.1-5_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFE5DAVK/juK3+WFWQRAqhWAJ9HsPKMOm47NCPp+vevSN87rcxrjwCdFf9J
0Q2Ew8d+6VArznjQzOQuhsQ=
=Ye9+
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to