[Zope-dev] Zope tests: 8 OK

2006-01-25 Thread Zope tests summarizer
Summary of messages to the zope-tests list.
Period Tue Jan 24 12:01:01 2006 UTC to Wed Jan 25 12:01:01 2006 UTC.
There were 8 messages: 8 from Zope Unit Tests.


Tests passed OK
---

Subject: OK : Zope-2_6-branch Python-2.1.3 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:03:08 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004090.html

Subject: OK : Zope-2_6-branch Python-2.3.5 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:04:39 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004091.html

Subject: OK : Zope-2_7-branch Python-2.3.5 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:06:09 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004092.html

Subject: OK : Zope-2_7-branch Python-2.4.2 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:07:39 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004093.html

Subject: OK : Zope-2_8-branch Python-2.3.5 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:09:09 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004094.html

Subject: OK : Zope-2_8-branch Python-2.4.2 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:10:39 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004095.html

Subject: OK : Zope-2_9-branch Python-2.4.2 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:12:09 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004096.html

Subject: OK : Zope-trunk Python-2.4.2 : Linux
From: Zope Unit Tests
Date: Tue Jan 24 21:13:40 EST 2006
URL: http://mail.zope.org/pipermail/zope-tests/2006-January/004097.html

___
Zope-Dev maillist  -  Zope-Dev@zope.org
http://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope )


Re: [Zope] Zope vs Plone: performance issues!

2006-01-25 Thread Dario Lopez-Kästen

Hugo Ramos wrote:

Well... They were already using Zope's cache and Squid to proxy some static HTML
I guess the problem is Plone itself... Skins etc...



eh, sorry for probably stating the obvious. you menationed in an earlier 
mail that you have good hardware. If this hardware is multi-cpu then I 
suggest that you use some tool (i.e. taskset on linux) to bind each zope 
python process to a single cpu.


Threaded python applications does not work well in multi-cpu settings 
where there is a chance of a threaded python process being spread out 
over more than one CPU. I causes a, sometimes signinficant, performance 
loss.


Just by binding the zope python processes to a single CPU (not 
necessarily the same, just make sure that any single python process is 
not spread over more than one CPU) you will notice a preformance increase.


And like all the others said, Caching is you friend. Start by checking 
the ZODB cache numbers in the zope-conf file (too start simple). IIRC, 
the default is 5000 objects. Increase that to, say 50.000 or so (you 
mention that you have a busy site).


Good luck.

/dario

--
-- ---
Dario Lopez-Kästen, IT Systems  Services Chalmers University of Tech.
Lyrics applied to programming  application design:
emancipate yourself from mental slavery - redemption song, b. marley

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Tino Wildenhain

Jeff Donsbach schrieb:

On 1/24/06, michael nt milne [EMAIL PROTECTED] wrote:


Ok, thanks. The annoying thing is that I am renting a virtual dedicated
server which allows multiple domain names obviously but not multiple IP
addresses. Or it probably costs more for that. Do you reckon SSL will ever
be available for virtual single IP based hosts?



I believe you can use SSL and name based virtual hosts if you use
unique ports for each vhost. I've never done it myself, but I remember
reading that somewhere in Apache documentation that it was possible.


Well we are telling exactly this all the time here in this thread :-)
But strictly speaking its not name based vhost if you use the IP
address to determine the vhost. It usually has a name too (and it has
to - in order for the certificate to work)

And for the hosting provider, dont believe they know all and everything.

Been there, seen so much... ;)

Regards
Tino
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] TinyMCE

2006-01-25 Thread Chris Withers

Garito wrote:
The default behaviour is to edit a page with the editor but I need to 
use kupu on a form, perhaps with more than one editor per form


I think I can use kupu data-centered instead of page-centered isn't it?


Try looking at how kupu is used in Plohn, where there can be more than 
one editor per form...


cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Squid ESI

2006-01-25 Thread Chris Withers

Paul Winkler wrote:

(and final page composition) downstream. This generally means either:

- Squid and ESI


Has anyone actually implemented this? I see it thrown out as a 
suggestion quite often, but when I tried the how-to on longsleep.org 
yesterday I found that the latest Squid 3.0 pre-release won't even 
compile with ESI enabled :-(


cheers,

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Alexander Limi
On Wed, 25 Jan 2006 00:11:04 -0800, Dario Lopez-Kästen  
[EMAIL PROTECTED] wrote:


Start by checking the ZODB cache numbers in the zope-conf file (too  
start simple). IIRC, the default is 5000 objects. Increase that to, say  
50.000 or so (you mention that you have a busy site).


Sorry, but this is not good advice. 5000 objects in the cache is normally  
plenty, and you should look into caching the front-end before you even  
consider this. 50K objects in the cache will eat *a lot* of memory, and  
most likely cause swapping.


Cache properly with Apache or Squid in front first, then investigate the  
more complex settings.


--
_

 Alexander Limi · Chief Architect · Plone Solutions · Norway

 Consulting · Training · Development · http://www.plonesolutions.com
_

  Plone Co-Founder · http://plone.org · Connecting Content
  Plone Foundation · http://plone.org/foundation · Protecting Plone

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 10:42, Alexander Limi wrote:

On Wed, 25 Jan 2006 00:11:04 -0800, Dario Lopez-Kästen  
[EMAIL PROTECTED] wrote:


Start by checking the ZODB cache numbers in the zope-conf file  
(too start simple). IIRC, the default is 5000 objects. Increase  
that to, say 50.000 or so (you mention that you have a busy site).


Sorry, but this is not good advice. 5000 objects in the cache is  
normally plenty, and you should look into caching the front-end  
before you even consider this. 50K objects in the cache will eat *a  
lot* of memory, and most likely cause swapping.


Cache properly with Apache or Squid in front first, then  
investigate the more complex settings.


Yes, just saying change the setting to X is definitely not good  
advice. But when it comes to twiddling knobs I would work from the  
bottom up instead of the other way around, meaning optimize the  
settings you have in Zope first. Even if you know you will use a  
cache you will want to make sure the backend is tuned properly.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Dario Lopez-Kästen

Subject: Re: Zope vs Plone: performance issues!
Alexander Limi wrote:



On Wed, 25 Jan 2006 00:11:04 -0800, Dario Lopez-Kästen  
[EMAIL PROTECTED] wrote:


Start by checking the ZODB cache numbers in the zope-conf file (too  
start simple). IIRC, the default is 5000 objects. Increase that to, 
say  50.000 or so (you mention that you have a busy site).



Sorry, but this is not good advice. 5000 objects in the cache is 
normally  plenty, and you should look into caching the front-end before 
you even  consider this. 50K objects in the cache will eat *a lot* of 
memory, and  most likely cause swapping.


Cache properly with Apache or Squid in front first, then investigate 
the  more complex settings.




Does this apply for personanlsied content as well? Remember, his site is
 an intranet.

We at least, have had good results by increasing the internal ZODB
caching. I fail to see how squid could help us with a site that is
mostly non-static. It would be nicer of course if we could use some
other kind of caching, so I am always open to suggestions :-)

/dario

--
-- ---
Dario Lopez-Kästen, IT Systems  Services Chalmers University of Tech.
Lyrics applied to programming  application design:
emancipate yourself from mental slavery - redemption song, b. marley
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 11:36, Dario Lopez-Kästen wrote:
Start by checking the ZODB cache numbers in the zope-conf file  
(too  start simple). IIRC, the default is 5000 objects. Increase  
that to, say  50.000 or so (you mention that you have a busy site).
Sorry, but this is not good advice. 5000 objects in the cache is  
normally  plenty, and you should look into caching the front-end  
before you even  consider this. 50K objects in the cache will eat  
*a lot* of memory, and  most likely cause swapping.
Cache properly with Apache or Squid in front first, then  
investigate the  more complex settings.


Does this apply for personanlsied content as well? Remember, his  
site is

 an intranet.

We at least, have had good results by increasing the internal ZODB
caching. I fail to see how squid could help us with a site that is
mostly non-static. It would be nicer of course if we could use some
other kind of caching, so I am always open to suggestions :-)


Increasing the ZODB cache is a good thing, you just need to keep RAM  
usage in check. The bigger the cache, the more RAM you use. Swapping  
would quickly annihilate any advantages you gain by having the cache.


You should also look at increasing the ZEO cache size if you use ZEO.  
This can be done in zope.conf as well. The ZEO cache is a disk cache.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] unpickle error on Data.fs pack

2006-01-25 Thread Gerhard Schmidt
Hi, 

since three days we have problems when packing the Data.fs. 

2006-01-25T03:40:42 ERROR(200) zrpc:7266 Error raised in delayed method
Traceback (most recent call last):
  File /usr/local/www/Zope/lib/python/ZEO/StorageServer.py, line 991, in run
result = self._method(*self._args)
  File /usr/local/www/Zope/lib/python/ZEO/StorageServer.py, line 315, in 
_pack_impl
self.storage.pack(time, referencesf)
  File /usr/local/www/Zope/lib/python/ZODB/FileStorage.py, line 1582, in pack
opos = p.pack()
  File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 700, in pack
self.gc.findReachable()
  File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 456, in 
findReachable
self.findReachableAtPacktime([z64])
  File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 531, in 
findReachableAtP
acktime
todo.extend(self.findrefs(pos))
  File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 604, in findrefs
return referencesf(self._file.read(dh.plen))
  File /usr/local/www/Zope/lib/python/ZODB/referencesf.py, line 38, in 
referencesf
raise ValueError, 'Error unpickling %r' % p
ValueError: Error unpickling 
'((U\x0eBTrees.OIBTreeq\x01U\x08OIBucketq\x02tq\x03Nt.((
U\x05nchenq\x04J\xc6{a\xfeU\x0fnchen/ottobrunnq\x05J\xbd\xeby\xcfU\x04ndigq\x06J\n\xf
0}QU\x05ndnisq\x07J\xd9\xdc\xbfIU\x02neq\x08J1!\x15\xe9U\x05nebenq\tJT]4\xc0U\x03netq
\nJ\xf3cU\xb6U\x04net/q\x0bJ\nM\xe5\xd6U\x07networkq\x0cJ\xf5\x85!\xe5U\tnetzartigq\r
J\xd4\xf9\x906U\x03neuq\x0eJv\xd7\xe9U\x04neueq\x0fJW\xedD\xd8U\x05neuenq\x10J0!\x0
7U\x05neuesq\x11J\xb9\xa5\xb4sU\x08neuestenq\x12JW2\xcc-U\x07nftigenq\x13J\xd5iU\x0
3ngeq\x14J%\xa9X\x10U\x06ngerenq\x15J\x1d\x14YU\x04ngigq\x16J\xc4\xe6\xe5\xd4U\x06ng
igenq\x17J}\xbd\xffpU\nngigkeitenq\x18J)]\x06IU\x05nichtq\x19J\x0bgyU\x07nkungenq\x1
aJC4\xf7\x10U\x04nnenq\x1bJU\xc4bFU\x04nochq\x1cJ\xb4\xf6\xcdUU\x07norbertq\x1dJ-\xf3
\xd7\x8fU\x06normenq\x1eJ[\x84\xd4\xaeU\x07normungq\x1fJ\xf4\xe9\xfc\xfcU\x08notebook
q 
J\xf7\xf2\x9e\xf9U\x0fnotebookeinsatzq!J`\x8fRiU\tnotebooksqJ\xba\xecvU\x12notebo
okverwendungq#J_R\x10\x9aU\x02nrq$J\xfcSg\xddU\x05nscheq%J-\x88\xf8\xccU\x06nstigeqJ
\xa35\x0e\xcdU\x04nterq\'J\xb1\x94\x9b\xeeU\nnumerischeq(Jf\\n\xfeQ\x03nurq)J\xd2\x95
C\xf4U\x0cnutzbringendq*J\xd3\x84\x84\xeaU\x06nutzenq+J\xa7^\x86IU\tnutzungsmq,J\xc1\
xca\xb9LU\x02obq-J\xbe\xb7e\x94U\x06objectq.J\xaaP\x14\xf9U\x04oderq/J\\0\xc2(U\x05od
imaq0J\xcd\xf9\x0f:t(U\x08\x00\x00\x00\x00\x00%\xa5\xdaq1(U\x0eBTrees.OIBTreeq2U\x08O
IBucketq3ttq4Qtq5.'
--

I've tried to recover the data.fs with fsrecover but it returns 
without error and the error remains. fsrefs.py terminates with 
an error. Any idea how to fix the Data.fs. 

The System is still up an running and no error shown so far. 

Bye
Estartu


Gerhard Schmidt| Nick : estartu  IRC : Estartu  |
Fischbachweg 3 ||  PGP Public Key
86856 Hiltenfingen | EMail: [EMAIL PROTECTED]  |  on request 
Germany||  



pgpCXh1QIuAmp.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Jonathan
On Wed, 25 Jan 2006 00:11:04 -0800, Dario Lopez-Kästen 
[EMAIL PROTECTED] wrote:


Start by checking the ZODB cache numbers in the zope-conf file (too 
start simple). IIRC, the default is 5000 objects. Increase that to, say 
50.000 or so (you mention that you have a busy site).


Sorry, but this is not good advice. 5000 objects in the cache is normally 
plenty, and you should look into caching the front-end before you even 
consider this. 50K objects in the cache will eat *a lot* of memory, and 
most likely cause swapping.


Not necessarily bad advice... if you have enough memory to hold the complete 
zcatalog you will notice significant search time improvements and if your 
site does a lot of zcatalog searches this can be a significant improvement. 
We are currently running a zcatalog with over 1 million objects and the 
catalog and indexes are in excess of 6Gb in size; the more memory the better 
the search performance.


Front end caching is only good if you are serving up 'static' pages.  Pages 
that are dynamically created, for each user/request, are not a good use case 
for front end caching (the exception is if there are portions of the pages, 
such a images, etc, which are common across your dynamically created pages, 
which will then make use of front end caching).


Jonathan

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] add folder from the filesystem

2006-01-25 Thread George
Is there a way to add a folder with its contents from the filesystem into Zope using an external method?thx in [EMAIL PROTECTED]
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] add folder from the filesystem

2006-01-25 Thread Peter Bengtsson
On 1/25/06, George [EMAIL PROTECTED] wrote:
 Is there a way to add a folder with its contents from the filesystem into
 Zope using an external method?

What do you mean? Do you have a folder in /home/someone/stuff filled
with files that you want to upload?
If you download the CVS version of the IssueTrackerProduct you'll find
code that does exactly this (recursively).



 thx in [EMAIL PROTECTED]
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )





--
Peter Bengtsson,
work www.fry-it.com
home www.peterbe.com
hobby www.issuetrackerproduct.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] add folder from the filesystem

2006-01-25 Thread Jonathan



Sure...

you need to have your external method access the 
file system 'folder/directory' and then read each file in the folder to get the 
contents of the files.

Some zope methods that may be of use (check the 
zope book):

To create a folder within the zodb:
 manage_addFolder

To add objects to the folder (you need to determine 
which objects you want to add):
 manage_addFile
 manage_addImage
 manage_addDocument
 
manage_addDTMLMethod


hth

Jonathan


  - Original Message - 
  From: 
  George 
  To: zope@zope.org 
  Sent: Wednesday, January 25, 2006 7:17 
  AM
  Subject: [Zope] add folder from the 
  filesystem
  Is there a way to add a folder with its contents from the 
  filesystem into Zope using an external method?thx in [EMAIL PROTECTED] 
  
  

  ___Zope maillist 
  - Zope@zope.orghttp://mail.zope.org/mailman/listinfo/zope** 
  No cross posts or HTML encoding! **(Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announcehttp://mail.zope.org/mailman/listinfo/zope-dev 
  )
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] add folder from the filesystem

2006-01-25 Thread Igor Stroh
George wrote:
 Is there a way to add a folder with its contents from the filesystem
 into Zope using an external method?

There's a script in zope's bin directory called load_site.py, it does
exactly what you're looking for:

$ cd /usr/lib/zope2.8/bin
$ python -c 'import load_site;print load_site.__doc__'
Load a Zope site from a collection of files or directories

HTH,
Igor
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] unpickle error on Data.fs pack

2006-01-25 Thread Gerhard Schmidt
On Wed, Jan 25, 2006 at 12:52:10PM +0100, Gerhard Schmidt wrote:
 I've tried to recover the data.fs with fsrecover but it returns 
 without error and the error remains. fsrefs.py terminates with 
 an error. Any idea how to fix the Data.fs. 

fsrefs.py returns the following.

Traceback (most recent call last):
  File /usr/local/www/Zope/bin/fsrefs.py, line 189, in ?
main(path)
  File /usr/local/www/Zope/bin/fsrefs.py, line 161, in main
refs = get_refs(data)
  File /usr/local/www/Zope/bin/fsrefs.py, line 105, in get_refs
u.noload() # instance state info
cPickle.UnpicklingError: invalid load key, ''.

Thats all. 

The Data.fs is about 3Gig. 

Bye
Estartu

-
Gerhard Schmidt   | E-Mail: [EMAIL PROTECTED]
TU-München|
WWW  Online Services |
Tel: 089/289-25270|
Fax: 089/289-25257| PGP-Publickey auf Anfrage 



pgphjjYxUYG04.pgp
Description: PGP signature
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread michael nt milne
David Pratt -Hi Michael. First you need a way to get to the root of
your site two
different ways. First is using the domain you have your ssl on and the
other for your other domain name(s)

Thanks for that David. I will try out what you say.Hopefully it will
work because not being able to do multiple virtual hosts on SSL is a
real problem.

Jonathan Cyr
[EMAIL PROTECTED]to ZOPE.org More options  Jan 24 (14 hours ago)
You can have one HTTPS/SSL per IP per port.

Jonathan, so this would mean using one IP address with SSL on multiple
port addresses , 90, 100, 110 etc etc which would then match to the
Plone 8080 port?

The port doesn't have to be 443?


On 1/25/06, Tino Wildenhain [EMAIL PROTECTED] wrote:
 Jeff Donsbach schrieb:
  On 1/24/06, michael nt milne [EMAIL PROTECTED] wrote:
 
 Ok, thanks. The annoying thing is that I am renting a virtual dedicated
 server which allows multiple domain names obviously but not multiple IP
 addresses. Or it probably costs more for that. Do you reckon SSL will ever
 be available for virtual single IP based hosts?
 
 
  I believe you can use SSL and name based virtual hosts if you use
  unique ports for each vhost. I've never done it myself, but I remember
  reading that somewhere in Apache documentation that it was possible.

 Well we are telling exactly this all the time here in this thread :-)
 But strictly speaking its not name based vhost if you use the IP
 address to determine the vhost. It usually has a name too (and it has
 to - in order for the certificate to work)

 And for the hosting provider, dont believe they know all and everything.

 Been there, seen so much... ;)

 Regards
 Tino

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Chris Withers

Jens Vagelpohl wrote:


On 24 Jan 2006, at 18:10, David Pratt wrote:
Have you tested this? The authentication machinery uses cookies, and  
the browser will not send cookies that were set by the secure login  
host to the unsecured sites.


...only if the secure bit of the cookie is set ;-)

Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 14:26, Chris Withers wrote:


Jens Vagelpohl wrote:

On 24 Jan 2006, at 18:10, David Pratt wrote:
Have you tested this? The authentication machinery uses cookies,  
and  the browser will not send cookies that were set by the secure  
login  host to the unsecured sites.


...only if the secure bit of the cookie is set ;-)


This is about different hostnames, remember?

jens


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Martijn Pieters
On 1/24/06, michael nt milne [EMAIL PROTECTED] wrote:
 Ok, thanks. The annoying thing is that I am renting a virtual dedicated
 server which allows multiple domain names obviously but not multiple IP
 addresses. Or it probably costs more for that. Do you reckon SSL will ever
 be available for virtual single IP based hosts?

No, because it is a technical limitation. The SSL certificate is used
to encrypt the channel to the client. As the named virtual host
selection is based on the Host header sent over this encrypted
channel, you cannot use a SSL certificate per named virtual host.
Hence the limitation of one SSL certificate per IP address.

You can work around this limitation if all your virtual hosts share
the same top-level domain name, by using a wildcard certificate. For
example, for all example.com virtual hosts, one *.example.com SSL
certificate can be used without the browser ever complaining about a
name mismatch.

--
Martijn Pieters
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Squid ESI

2006-01-25 Thread Martijn Pieters
On 1/25/06, Chris Withers [EMAIL PROTECTED] wrote:
 Has anyone actually implemented this? I see it thrown out as a
 suggestion quite often, but when I tried the how-to on longsleep.org
 yesterday I found that the latest Squid 3.0 pre-release won't even
 compile with ESI enabled :-(

Squid 3.0 is a bit of an orphan. Zope Corp at one point paid for ESI
support in Squid 3.0 for the Boston.com project, but it was never used
for Boston in the end and development on it stalled. With Squid 2.x
meeting current demands and little funding and incentive for
completing ESI development this has fallen by the wayside. I certianly
haven't touched Squid 3.0/ESI since the Boston.com days, and as far as
I know only one or two others in the Zope community have looked at it
since.

--
Martijn Pieters
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread michael nt milne
Hi

The virtual hosts are all served from the same server but they don't
actually share the same domain. They have different domain names but
are served from the same IP.

I'm going to try David Pratt's method above to set up a
mysecure.domain.com and then use Apache to re-write in and out of the
login areas etc.

Thanks for all the help

Michael

On 1/25/06, Martijn Pieters [EMAIL PROTECTED] wrote:
 On 1/24/06, michael nt milne [EMAIL PROTECTED] wrote:
  Ok, thanks. The annoying thing is that I am renting a virtual dedicated
  server which allows multiple domain names obviously but not multiple IP
  addresses. Or it probably costs more for that. Do you reckon SSL will ever
  be available for virtual single IP based hosts?

 No, because it is a technical limitation. The SSL certificate is used
 to encrypt the channel to the client. As the named virtual host
 selection is based on the Host header sent over this encrypted
 channel, you cannot use a SSL certificate per named virtual host.
 Hence the limitation of one SSL certificate per IP address.

 You can work around this limitation if all your virtual hosts share
 the same top-level domain name, by using a wildcard certificate. For
 example, for all example.com virtual hosts, one *.example.com SSL
 certificate can be used without the browser ever complaining about a
 name mismatch.

 --
 Martijn Pieters

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope vs Plone: performance issues!

2006-01-25 Thread Paul Winkler
On Wed, Jan 25, 2006 at 11:47:21AM +, Jens Vagelpohl wrote:
 You should also look at increasing the ZEO cache size if you use ZEO.  
 This can be done in zope.conf as well. The ZEO cache is a disk cache.

+9 on that.  This is the cache-size setting *within* the zeoclient
section.  Fetching an object from ZEO over the network can
be MUCH slower than fetching the object from a local FileStorage,
depending on the network of course, but even on localhost ZEO has
some overhead that can be significant -- especially for loading
Images and Files.  If instead the object is in the ZEO cache, no network
request is made and the speed is basically equivalent to FileStorage.  

So, if you have a lot of objects that are read more often than
they are written, a big ZEO client cache can be very helpful.
It's still 20 MB by default IIRC, which is probably too small
for most real storage sizes.

The clue that you need to bump it up is in your event.log.
See how often there are lines like:

2006-01-25T10:30:59 INFO(0) ZEC:1-None-0 flipping cache files.  new current = 0

AFAIK, that means you've used up half of the specified cache size
since the previous time such a message appeared.  
There's no hard fast rule about how often you should want to see
a cache flip. If you see this once a week, you're fine but you could
get away with a smaller cache if you care about the wasted
disk space. If you see it every five minutes, you have a too small
disk cache.  Somewhere in between is good ;-)  I prefer to err on the side
of making it huge, and stop worrying about it.

-- 

Paul Winkler
http://www.slinkp.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] SSL over Multiple Zope/Plone sites?

2006-01-25 Thread Chris Withers

Jens Vagelpohl wrote:



...only if the secure bit of the cookie is set ;-)


This is about different hostnames, remember?


Well, in that case https has nothing to do with it ;-)

cookies for one domain never get sent to another, unless you're using IE 
or something ;-)


Chris

--
Simplistix - Content Management, Zope  Python Consulting
   - http://www.simplistix.co.uk
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] zodb queries, importing and exporting

2006-01-25 Thread Cliff Williams



LEAD UP:
I've got a site that I need to develop and it's a natural and obvious 
decision that I use zope and plone as they are what I'm familiar with 
and what I prefer to other CMS/Portal-wares out there. The site will 
have several counter parts around the globe being administered by 
various individuals, not all of whom are enlightened enough to realize 
the folly of using anything other than zope.


MEAT OF THE ISSUE:
The sites will be tracking dance clubs. We'll be building Types in plone 
(Using Archetypes) to track information about clubs locally. Each site 
will potentially have different database technology from the other 
sites. I know of 3 admins who are planning on using PHP-* + MySQL and a 
few others who want to use Postgress and some other front end.


We want to be able to integrate the information from any one site into 
any other site with respect to the club objects in the disparate 
databases. I'd like to leverage the simplicity of zope's 
application/database model and not use SQL storage if possible but don't 
know how I can be able to share with my counterparts who are bent on 
using relational databases.


We do not intend to leave open connections to each other's database 
servers. The consensus is to do scheduled dumps and push the files to 
the other admins who would have their own routines for integrating the 
data into their site. I really don't want to have to set up an SQL server.


Any help/suggestions would be greatly appreciated.

--Cliff

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] zodb queries, importing and exporting

2006-01-25 Thread Jonathan
Not a zope question, but... why don't you create a mutually agreed upon XML 
DTD (document type definition) that represents the content of a database 
record.  Then each party can implement the XML data extraction/upload to 
their own db technology as they please.


Each db operator will send/receive data in the agreed upon XML format 
(that's what its for!).


Jonathan

- Original Message - 
From: Cliff Williams [EMAIL PROTECTED]

To: zope@zope.org
Sent: Wednesday, January 25, 2006 11:23 AM
Subject: [Zope] zodb queries, importing and exporting





LEAD UP:
I've got a site that I need to develop and it's a natural and obvious 
decision that I use zope and plone as they are what I'm familiar with and 
what I prefer to other CMS/Portal-wares out there. The site will have 
several counter parts around the globe being administered by various 
individuals, not all of whom are enlightened enough to realize the folly 
of using anything other than zope.


MEAT OF THE ISSUE:
The sites will be tracking dance clubs. We'll be building Types in plone 
(Using Archetypes) to track information about clubs locally. Each site 
will potentially have different database technology from the other sites. 
I know of 3 admins who are planning on using PHP-* + MySQL and a few 
others who want to use Postgress and some other front end.


We want to be able to integrate the information from any one site into any 
other site with respect to the club objects in the disparate databases. 
I'd like to leverage the simplicity of zope's application/database model 
and not use SQL storage if possible but don't know how I can be able to 
share with my counterparts who are bent on using relational databases.


We do not intend to leave open connections to each other's database 
servers. The consensus is to do scheduled dumps and push the files to the 
other admins who would have their own routines for integrating the data 
into their site. I really don't want to have to set up an SQL server.


Any help/suggestions would be greatly appreciated.

--Cliff

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread michael nt milne
Just a quick question about Zope/Plone logins and security etc. When I
go to www.domain.com:8080/manage I get a login box which seems to
function in exactly the same way as the www.domain.com:8080/login_form
page.

My question is, what was the rational for implementing this logon
strategy in Zope as it obviously acts as authentication and
authorisation but falls down on confidentiality and data integrity?
Also would there be any plans at all in the future to make this logon
process authenticate, be confidential and have integrity? I know that
you can do it in Apache etc but for most people that's probably quite
a big step. Most people probably reckon that the appearance of the
logon box makes their site secure. I'm only talking about the logon
areas here, etc.

Thanks

Michael
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
michael nt milne schrieb:
 Just a quick question about Zope/Plone logins and security etc. When I
 go to www.domain.com:8080/manage I get a login box which seems to
 function in exactly the same way as the www.domain.com:8080/login_form
 page.
 
 My question is, what was the rational for implementing this logon
 strategy in Zope as it obviously acts as authentication and
 authorisation but falls down on confidentiality and data integrity?
 Also would there be any plans at all in the future to make this logon
 process authenticate, be confidential and have integrity? I know that
 you can do it in Apache etc but for most people that's probably quite
 a big step. Most people probably reckon that the appearance of the
 logon box makes their site secure. I'm only talking about the logon
 areas here, etc.

I wonder what you mean. Could you outline a way how you believe
it should work? What are your concerns about security exactly?

With zope you have security down to individual object attributes.

Each time you access an attribute and dont have sufficient rights,
you are presented with some way to login (the exact apearance however
depends on the userfolder you use).

So how do you think it should work instead and what are the improvements
you see as well as the drawbacks?

Regards
Tino Wildenhain
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] XML-RPC encrypted?

2006-01-25 Thread José Carlos Senciales

Hello,

I need to use XML-RPC to call some functions of a product in zope, but all 
my xml-rpc conections

has  user:[EMAIL PROTECTED]:port\folder\method

I´m wondering if it´s possible to do a call with xml-rpc with all data 
encrypted... with ssl...?


Thanks.
Jose Carlos 


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] XML-RPC encrypted?

2006-01-25 Thread Peter Bengtsson
Have you tried
https://user:[EMAIL PROTECTED]:port\folder\method..
?

On 1/25/06, José Carlos Senciales [EMAIL PROTECTED] wrote:
 Hello,

 I need to use XML-RPC to call some functions of a product in zope, but all
 my xml-rpc conections
 has  user:[EMAIL PROTECTED]:port\folder\method

 I´m wondering if it´s possible to do a call with xml-rpc with all data
 encrypted... with ssl...?

 Thanks.
 Jose Carlos

 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )



--
Peter Bengtsson,
work www.fry-it.com
home www.peterbe.com
hobby www.issuetrackerproduct.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] XML-RPC encrypted?

2006-01-25 Thread Tino Wildenhain
Peter Bengtsson schrieb:
 Have you tried
 https://user:[EMAIL PROTECTED]:port\folder\method..
 ?
 
 On 1/25/06, José Carlos Senciales [EMAIL PROTECTED] wrote:
 
Hello,

I need to use XML-RPC to call some functions of a product in zope, but all
my xml-rpc conections
has  user:[EMAIL PROTECTED]:port\folder\method


I'd use forward-Slashes /// in URLs anyway ;))

And yes, SSL works and you dont send user:password in
an url to the server - the client will/should build
a real BasicAuth-Header out of it (which you better
transport over ssl anyway)

HTH
Tino
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 17:17, michael nt milne wrote:


Just a quick question about Zope/Plone logins and security etc. When I
go to www.domain.com:8080/manage I get a login box which seems to
function in exactly the same way as the www.domain.com:8080/login_form
page.

My question is, what was the rational for implementing this logon
strategy in Zope as it obviously acts as authentication and
authorisation but falls down on confidentiality and data integrity?
Also would there be any plans at all in the future to make this logon
process authenticate, be confidential and have integrity? I know that
you can do it in Apache etc but for most people that's probably quite
a big step. Most people probably reckon that the appearance of the
logon box makes their site secure. I'm only talking about the logon
areas here, etc.


This login page is not a Zope login page, it is a Plone/CMF login  
page. It does not reflect any architectural decisions on the Zope side.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] zodb queries, importing and exporting

2006-01-25 Thread J Cameron Cooper

Jonathan wrote:
Not a zope question, but... why don't you create a mutually agreed upon 
XML DTD (document type definition) that represents the content of a 
database record.  Then each party can implement the XML data 
extraction/upload to their own db technology as they please.


Each db operator will send/receive data in the agreed upon XML format 
(that's what its for!).


If you use ATXML (see the Marshall product) you can even 
marshall/demarshall the files directly to/from your objects via 
FTP/WebDAV. No intermediate representation.


--jcc

- Original Message - From: Cliff Williams 
[EMAIL PROTECTED]

To: zope@zope.org
Sent: Wednesday, January 25, 2006 11:23 AM
Subject: [Zope] zodb queries, importing and exporting





LEAD UP:
I've got a site that I need to develop and it's a natural and obvious 
decision that I use zope and plone as they are what I'm familiar with 
and what I prefer to other CMS/Portal-wares out there. The site will 
have several counter parts around the globe being administered by 
various individuals, not all of whom are enlightened enough to realize 
the folly of using anything other than zope.


MEAT OF THE ISSUE:
The sites will be tracking dance clubs. We'll be building Types in 
plone (Using Archetypes) to track information about clubs locally. 
Each site will potentially have different database technology from the 
other sites. I know of 3 admins who are planning on using PHP-* + 
MySQL and a few others who want to use Postgress and some other front 
end.


We want to be able to integrate the information from any one site into 
any other site with respect to the club objects in the disparate 
databases. I'd like to leverage the simplicity of zope's 
application/database model and not use SQL storage if possible but 
don't know how I can be able to share with my counterparts who are 
bent on using relational databases.


We do not intend to leave open connections to each other's database 
servers. The consensus is to do scheduled dumps and push the files to 
the other admins who would have their own routines for integrating the 
data into their site. I really don't want to have to set up an SQL 
server.


Any help/suggestions would be greatly appreciated.

--Cliff

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )



___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )





--
Building Websites with Plone
http://plonebook.packtpub.com/

Enfold Systems, LLC
http://www.enfoldsystems.com
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread michael nt milne
Hi

Yeah I know the security aspects are good once you are in, however
when you login it's possible for someone to grab your logon name and
pass as it goes over the internet, as there's no encryption at all.
Then obviously login themselves and compromise your sites.

Just slightly concerned about this as I plan to have a few sites
set-up on one server, with client logins and have to advise on
security. I know that Apache SSL can help but it's a tricky extra step
and I only need to secure the login areas at the moment, not encrypt a
whole site.

Thanks

Michael

On 1/25/06, Jens Vagelpohl [EMAIL PROTECTED] wrote:

 On 25 Jan 2006, at 17:17, michael nt milne wrote:

  Just a quick question about Zope/Plone logins and security etc. When I
  go to www.domain.com:8080/manage I get a login box which seems to
  function in exactly the same way as the www.domain.com:8080/login_form
  page.
 
  My question is, what was the rational for implementing this logon
  strategy in Zope as it obviously acts as authentication and
  authorisation but falls down on confidentiality and data integrity?
  Also would there be any plans at all in the future to make this logon
  process authenticate, be confidential and have integrity? I know that
  you can do it in Apache etc but for most people that's probably quite
  a big step. Most people probably reckon that the appearance of the
  logon box makes their site secure. I'm only talking about the logon
  areas here, etc.

 This login page is not a Zope login page, it is a Plone/CMF login
 page. It does not reflect any architectural decisions on the Zope side.

 jens

 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Zope/Plone logon security strategy etc

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 18:55, michael nt milne wrote:


Hi

Yeah I know the security aspects are good once you are in, however
when you login it's possible for someone to grab your logon name and
pass as it goes over the internet, as there's no encryption at all.
Then obviously login themselves and compromise your sites.

Just slightly concerned about this as I plan to have a few sites
set-up on one server, with client logins and have to advise on
security. I know that Apache SSL can help but it's a tricky extra step
and I only need to secure the login areas at the moment, not encrypt a
whole site.


You should read up on HTTP authentication and cookie authentication,  
I sense some severe knowledge gaps there...


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread michael nt milne
Cookie authentication can't be secure. Also I have my doubts about
http authentication. I'll check though. Basicallx you want really good
encryption on any logon and password etc.

On 1/25/06, Jens Vagelpohl [EMAIL PROTECTED] wrote:

 On 25 Jan 2006, at 18:55, michael nt milne wrote:

  Hi
 
  Yeah I know the security aspects are good once you are in, however
  when you login it's possible for someone to grab your logon name and
  pass as it goes over the internet, as there's no encryption at all.
  Then obviously login themselves and compromise your sites.
 
  Just slightly concerned about this as I plan to have a few sites
  set-up on one server, with client logins and have to advise on
  security. I know that Apache SSL can help but it's a tricky extra step
  and I only need to secure the login areas at the moment, not encrypt a
  whole site.

 You should read up on HTTP authentication and cookie authentication,
 I sense some severe knowledge gaps there...

 jens

 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Structured Text Question

2006-01-25 Thread Asad Habib
Is there any way to have multiple lines of empty space between two 
sections of text in a Structured Text document? I looked on Google but did 
not find any answers to this question. However, I did notice that others 
had asked the question as well. Is this a shortcoming of Structured Text? 
Any help would be appreciated. Thanks.


- Asad
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Strange behaviour - 3 links which should be the same don't

2006-01-25 Thread Dieter Maurer
Sasha Vincic wrote at 2006-1-24 23:22 +0100:
On 1/24/06, Dieter Maurer [EMAIL PROTECTED] wrote:

 The three links may be different with respect to the effective
 base URL.
The first two have the same base URL which is the same as second link.

The third link doesn't have any base, which is strange. Well I got
something more to check then.

No, that is correct:

   Zope adds the base only when it has modified the URL (e.g.
   by adding index_html) in order to inform the browser that
   its knowledge about the URL is no longer correct.

You observation means, that all three URLs are equivalent
both from Zope's as well as the browser's point of view.
Strange, that you nevertheless see different behaviour.

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] unpickle error on Data.fs pack

2006-01-25 Thread Dieter Maurer
Gerhard Schmidt wrote at 2006-1-25 12:52 +0100:
since three days we have problems when packing the Data.fs. 

2006-01-25T03:40:42 ERROR(200) zrpc:7266 Error raised in delayed method
Traceback (most recent call last):
 ...
  File /usr/local/www/Zope/lib/python/ZODB/referencesf.py, line 38, in 
 referencesf
raise ValueError, 'Error unpickling %r' % p
ValueError: Error unpickling 
'((U\x0eBTrees.OIBTreeq\x01U\x08OIBucketq\x02tq\x03Nt.((
U\x05nchenq\x04J\xc6{a\xfeU\x0fnchen/ottobrunnq\x05J\xbd\xeby\xcfU\x04ndigq\x06J\n\xf
0}QU\x05ndnisq\x07J\xd9\xdc\xbfIU\x02neq\x08J1!\x15\xe9U\x05nebenq\tJT]4\xc0U\x03netq
\nJ\xf3cU\xb6U\x04net/q\x0bJ\nM\xe5\xd6U\x07networkq\x0cJ\xf5\x85!\xe5U\tnetzartigq\r
J\xd4\xf9\x906U\x03neuq\x0eJv\xd7\xe9U\x04neueq\x0fJW\xedD\xd8U\x05neuenq\x10J0!\x0
7U\x05neuesq\x11J\xb9\xa5\xb4sU\x08neuestenq\x12JW2\xcc-U\x07nftigenq\x13J\xd5iU\x0
3ngeq\x14J%\xa9X\x10U\x06ngerenq\x15J\x1d\x14YU\x04ngigq\x16J\xc4\xe6\xe5\xd4U\x06ng
igenq\x17J}\xbd\xffpU\nngigkeitenq\x18J)]\x06IU\x05nichtq\x19J\x0bgyU\x07nkungenq\x1
aJC4\xf7\x10U\x04nnenq\x1bJU\xc4bFU\x04nochq\x1cJ\xb4\xf6\xcdUU\x07norbertq\x1dJ-\xf3
\xd7\x8fU\x06normenq\x1eJ[\x84\xd4\xaeU\x07normungq\x1fJ\xf4\xe9\xfc\xfcU\x08notebook
q 
J\xf7\xf2\x9e\xf9U\x0fnotebookeinsatzq!J`\x8fRiU\tnotebooksqJ\xba\xecvU\x12notebo
okverwendungq#J_R\x10\x9aU\x02nrq$J\xfcSg\xddU\x05nscheq%J-\x88\xf8\xccU\x06nstigeqJ
\xa35\x0e\xcdU\x04nterq\'J\xb1\x94\x9b\xeeU\nnumerischeq(Jf\\n\xfeQ\x03nurq)J\xd2\x95
C\xf4U\x0cnutzbringendq*J\xd3\x84\x84\xeaU\x06nutzenq+J\xa7^\x86IU\tnutzungsmq,J\xc1\
xca\xb9LU\x02obq-J\xbe\xb7e\x94U\x06objectq.J\xaaP\x14\xf9U\x04oderq/J\\0\xc2(U\x05od
imaq0J\xcd\xf9\x0f:t(U\x08\x00\x00\x00\x00\x00%\xa5\xdaq1(U\x0eBTrees.OIBTreeq2U\x08O
IBucketq3ttq4Qtq5.'
--

I've tried to recover the data.fs with fsrecover but it returns 
without error and the error remains. fsrefs.py terminates with 
an error. Any idea how to fix the Data.fs. 

Looks like something corrupted your file.

Python 2.3 and above contain a module pickleutils (or similar).
You can use this module to analyse you pickle and (maybe) find
how you can fix the object.

-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Indexing files

2006-01-25 Thread Dieter Maurer
Sune Christiansen wrote at 2006-1-24 18:56 +0100:
when you say external PDF converter, do you mean the pdf converter I
created the pdf file with? I have tried to index a microsoft word file
also, but the result is the same: an empty index.

You need converters from the media format (i.e. PDF, MS-Word, ...)
to text (or maybe better named: text extraction utilities).

The standard PDF converter is XPDF (which contains pdftotext (or
similarly)). The standard Word converter is wvware.



-- 
Dieter
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


RE: [Zope] Structured Text Question

2006-01-25 Thread Asad Habib
Well, this decision was not made by me and I cannot override it. Given 
that I have to use Structured Text, is there a solution to this problem? 
Thanks.


- Asad


On Wed, 25 Jan 2006, Jaroslav Lukesh wrote:


Is there any way to have multiple lines of empty space between two
sections of text in a Structured Text document? I looked on Google but did
not find any answers to this question. However, I did notice that others
had asked the question as well. Is this a shortcoming of Structured Text?
Any help would be appreciated. Thanks.


Why?

Use stylesheets or fulltext replacement of some shortword to DIV with
appropriate geometry.

JL.


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] dealing with scripts that take too long

2006-01-25 Thread martin f krafft
Hi there,

we're experiencing problems with certain maintenance scripts, which
just take too long to complete, so that the browser resets the
connection and Zope aborts the transaction.

Short of splitting the scripts up into smaller pieces and running
them individually (which would be a pain), what can we do?

I was thinking we could send data back to the browser, but I cannot
figure out a way to do this from a TTW Python script. How can I send
data immediately, not only when I 'return printed' after all the
processing is done. NPH or so, I believe this was called with plain
CGIs.

Also, I would be interested in how other people approach this
problem. `zopectl run` may be an alternative, but we'd rather not
require filesystem access.

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
 
invalid/expired pgp (sub)keys? use subkeys.pgp.net as keyserver!
spamtraps: [EMAIL PROTECTED]
 
arrogance on the part of the meritorious is even more
 offensive to us than the arrogance of those without merit:
 for merit itself is offensive.
  -- friedrich nietzsche


signature.asc
Description: Digital signature (GPG/PGP)
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Can one nest macros with slots?

2006-01-25 Thread Doyon, Jean-Francois
I can't seem to do this:

use-macro
  fill-slot
define-macro
  ... Some html ...
  define-slot/define-slot
  ... Some html ...
/define-macro
  /fill-slot
/use-macro

Allowing me to nest multiple reusable templates?

I have objects with common interfaces which could easily share templates ...
If I could do this! (The shared template still needs to endup in the
master template).

Or are there other techniques to achieve this?

Thanks!

Jean-François Doyon
Internet Service Development and Systems Support / Spécialiste de
dèveloppements internet et soutien technique
Canada Centre for Remote Sensing/Centre Canadien de télédétection
Natural Resources Canada/Ressources Naturelles Canada
http://atlas.gc.ca
Tel./Tél.: (613) 992-4902
Fax: (613) 947-2410
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] dealing with scripts that take too long

2006-01-25 Thread Jonathan

snip
we're experiencing problems with certain maintenance scripts, which
just take too long to complete, so that the browser resets the
connection and Zope aborts the transaction.

Short of splitting the scripts up into smaller pieces and running
them individually (which would be a pain), what can we do?

I was thinking we could send data back to the browser, but I cannot
figure out a way to do this from a TTW Python script. How can I send
data immediately, not only when I 'return printed' after all the
processing is done. NPH or so, I believe this was called with plain
CGIs.

Also, I would be interested in how other people approach this
problem. `zopectl run` may be an alternative, but we'd rather not
require filesystem access.
/snip

We are running a *nix environment, and use cron with script files that use 
either perl LWP or CURL to make http requests that invoke the zope 
methods/scripts. LWP, CURL (and others) give you the ability to control the 
timeout parameters.


hth

Jonathan

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: dealing with scripts that take too long

2006-01-25 Thread martin f krafft
also sprach Jonathan [EMAIL PROTECTED] [2006.01.25.2330 +0100]:
 We are running a *nix environment, and use cron with script files that use 
 either perl LWP or CURL to make http requests that invoke the zope 
 methods/scripts. LWP, CURL (and others) give you the ability to control the 
 timeout parameters.

So does wget. The problem is that our users are on Windows machines
without access to or knowledge of a Unix prompt. Thus, NPH would be
a nice way to go about it.

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
 
invalid/expired pgp (sub)keys? use subkeys.pgp.net as keyserver!
spamtraps: [EMAIL PROTECTED]
 
bill gates, 1984: 640 k ought to be enough
bill gates, 1995: the internet is not a primary goal for pc usage
bill gates, 1999: linux has no impact on microsoft's strategy


signature.asc
Description: Digital signature (GPG/PGP)
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
michael nt milne schrieb:
 Cookie authentication can't be secure. Also I have my doubts about
 http authentication. I'll check though. Basicallx you want really good
 encryption on any logon and password etc.

You want ssl for all. There is no security if you have logon encrypted
in a stateless protocol as HTTP is. Basically with HTTP you identify
for every single request. So if you login encrypted and say, handle
the session with a one time key (You could write a userfolder or plugin
for PAS to do that) the one time key is still vulnerable if not sent
over encrypted channel. So Using apache as ssl proxy is easy and secure
and does exactly what you want. There is not really an extra step
because you set up apache or the like anyway on a moderate to heavy used
site as frontent to zope.

As for the security aspect, a cooky with auth credentials is equally
secure as Basic Auth. There is really not much of a difference -
just other HTTP header-name.

Regards
Tino
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] dealing with scripts that take too long

2006-01-25 Thread Andrew Langmead

On Jan 25, 2006, at 5:17 PM, martin f krafft wrote:



we're experiencing problems with certain maintenance scripts, which
just take too long to complete, so that the browser resets the
connection and Zope aborts the transaction.


If these are maintenance scripts that are kicked off manually by  
admins (as opposed to things that can be automated with cron) then  
maybe you can use a technique similar to one we use here.


For certain long running actions that our users need, we use the Zope  
Scheduler product. The clicks a button on a UI form, the form then  
adds the script to the schedule queue as a one shot action. The  
scheduler clock is actually running on an entirely separate Zope  
instance on a different machine, so that machines sole duty is to  
handle these async requests. The script, once completed updates its  
status, so revisiting the initial form will let the user know the  
status of their request. (we also give them a view into the schedule  
queue so if things are taking too long at least they know where they  
stand.)


The Zope server that processes the scheduler queue is set up  
differently, since it is never has to handle user input. It only has  
a single thread, and the cache size is larger than normal (the stock  
zope config is for four threads, and each thread has its own cache  
pool.)

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] dealing with scripts that take too long

2006-01-25 Thread Tino Wildenhain
martin f krafft schrieb:
 Hi there,
...
 I was thinking we could send data back to the browser, but I cannot
 figure out a way to do this from a TTW Python script. How can I send
 data immediately, not only when I 'return printed' after all the
 processing is done. NPH or so, I believe this was called with plain
 CGIs.

Actually it does not have anything to do with NPH, but thats another
story.

You can just write via context.REQUEST.RESPONSE.write(somestring)

When you start doing this, you are switching to streaming mode
and anything you return from that script is discarded.

This is especially important to know when exceptions occur -
you wont see them unless you take precaution

try:
nasty_things()

except Exception,x:
response.write(Error: %r\n % x) # or something
raise x # dont forget to reraise!

Or you look into the error_log object.

 Also, I would be interested in how other people approach this
 problem. `zopectl run` may be an alternative, but we'd rather not
 require filesystem access.

zopectl run is actually fine for maintenance. Its also easier to
avoid running the same script 100x the same time - as it can happen
with HTTP requests. A simple cron job, some locking, report via
email ... and you are done.

HTH
Tino
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


RE: [Zope] Structured Text Question

2006-01-25 Thread Jaroslav Lukesh
 Well, this decision was not made by me and I cannot override it. Given
 that I have to use Structured Text, is there a solution to this problem?
 Thanks.

Yes. At attachment in my prev. mail you could find (not only by me) modified
version of STX from Zope 2.5.1 (partially from 2.6 too). Here you could find
how to define new tags into STX code. I does not use newer version of Zope,
so it would be little different.

Regards, JL.

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Structured Text Question

2006-01-25 Thread Jens Vagelpohl

fix broken top-quoting

On 25 Jan 2006, at 22:07, Asad Habib wrote:


On Wed, 25 Jan 2006, Jaroslav Lukesh wrote:


Is there any way to have multiple lines of empty space between two
sections of text in a Structured Text document? I looked on  
Google but did
not find any answers to this question. However, I did notice that  
others
had asked the question as well. Is this a shortcoming of  
Structured Text?

Any help would be appreciated. Thanks.


Why?

Use stylesheets or fulltext replacement of some shortword to DIV with
appropriate geometry.
Well, this decision was not made by me and I cannot override it.  
Given that I have to use Structured Text, is there a solution to  
this problem? Thanks.


Jaroslav gave you a solution. There is no good way to create multiple  
empty lines.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: dealing with scripts that take too long

2006-01-25 Thread martin f krafft
also sprach Tino Wildenhain [EMAIL PROTECTED] [2006.01.25.2345 +0100]:
 Actually it does not have anything to do with NPH, but thats another
 story.
 
 You can just write via context.REQUEST.RESPONSE.write(somestring)

This is exactly what I was looking for, I just couldn't remember the
process. I know it's not NPH, but reminiscent of it at least. :)

Thanks to you all for the quick responses!

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
 
invalid/expired pgp (sub)keys? use subkeys.pgp.net as keyserver!
spamtraps: [EMAIL PROTECTED]
 
a kiss may ruin a human life.
-- oscar wilde


signature.asc
Description: Digital signature (GPG/PGP)
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] dealing with scripts that take too long

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 22:17, martin f krafft wrote:

we're experiencing problems with certain maintenance scripts, which
just take too long to complete, so that the browser resets the
connection and Zope aborts the transaction.


I am assuming you use broken browsers that will time out, like IE?  
Use a more suitable browser like Firefox, those don't time out by  
default.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: dealing with scripts that take too long

2006-01-25 Thread martin f krafft
also sprach Jens Vagelpohl [EMAIL PROTECTED] [2006.01.25.2352 +0100]:
 I am assuming you use broken browsers that will time out, like IE?  
 Use a more suitable browser like Firefox, those don't time out by  
 default.

As far as I can remember, Firefox was being used, and it didn't time
out per se (no error), but the script apparently died some way
through; the transaction was aborted.

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
 
invalid/expired pgp (sub)keys? use subkeys.pgp.net as keyserver!
spamtraps: [EMAIL PROTECTED]
 
humpty was pushed.


signature.asc
Description: Digital signature (GPG/PGP)
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Re: dealing with scripts that take too long

2006-01-25 Thread Jens Vagelpohl


On 25 Jan 2006, at 22:56, martin f krafft wrote:

also sprach Jens Vagelpohl [EMAIL PROTECTED] [2006.01.25.2352  
+0100]:

I am assuming you use broken browsers that will time out, like IE?
Use a more suitable browser like Firefox, those don't time out by
default.


As far as I can remember, Firefox was being used, and it didn't time
out per se (no error), but the script apparently died some way
through; the transaction was aborted.


If the script dies by itself for some reason then invoking it in  
other ways might not help. You should concentrate on getting error  
tracebacks or other evidence that shows *why* the script dies, and go  
from there.


jens

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread michael nt milne
Yes I agree, having checked on basic http authentication I need SSL.
Basic http and cookie auth is insecure. I just feel that zope should
have this facility even with a self signed certificate, so that you
could do it without Apache and had more options. The option to even
just have it on for site logon would be good.

On 1/25/06, Tino Wildenhain [EMAIL PROTECTED] wrote:
 michael nt milne schrieb:
  Cookie authentication can't be secure. Also I have my doubts about
  http authentication. I'll check though. Basicallx you want really good
  encryption on any logon and password etc.

 You want ssl for all. There is no security if you have logon encrypted
 in a stateless protocol as HTTP is. Basically with HTTP you identify
 for every single request. So if you login encrypted and say, handle
 the session with a one time key (You could write a userfolder or plugin
 for PAS to do that) the one time key is still vulnerable if not sent
 over encrypted channel. So Using apache as ssl proxy is easy and secure
 and does exactly what you want. There is not really an extra step
 because you set up apache or the like anyway on a moderate to heavy used
 site as frontent to zope.

 As for the security aspect, a cooky with auth credentials is equally
 secure as Basic Auth. There is really not much of a difference -
 just other HTTP header-name.

 Regards
 Tino

___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Re: dealing with scripts that take too long

2006-01-25 Thread martin f krafft
also sprach Jens Vagelpohl [EMAIL PROTECTED] [2006.01.26.0002 +0100]:
 If the script dies by itself for some reason then invoking it in  
 other ways might not help. You should concentrate on getting error  
 tracebacks or other evidence that shows *why* the script dies, and go  
 from there.

I have not analysed the scripts myself, but they appear to be bulk
processing jobs. If they use things like objectIds with proper
filters, I don't see how it could fail after n iterations...

But yeah, the scripts need to be checked...

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
 
invalid/expired pgp (sub)keys? use subkeys.pgp.net as keyserver!
spamtraps: [EMAIL PROTECTED]
 
most people become bankrupt through having invested too heavily in
 the prose of life. to have ruined one's self over poetry is an
 honour.
-- oscar wilde


signature.asc
Description: Digital signature (GPG/PGP)
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] TinyMCE

2006-01-25 Thread Garito

Chris Withers escribió:

Garito wrote:
The default behaviour is to edit a page with the editor but I need to 
use kupu on a form, perhaps with more than one editor per form


I think I can use kupu data-centered instead of page-centered isn't it?


Try looking at how kupu is used in Plohn, where there can be more than 
one editor per form...


cheers,

Chris


Yeah!
I read the documentation of the new version

Thanks!

--
Mis Cosas
http://blogs.sistes.net/Garito/


___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] unpickle error on Data.fs pack

2006-01-25 Thread Tim Peters
[Gerhard Schmidt]
 since three days we have problems when packing the Data.fs.

 2006-01-25T03:40:42 ERROR(200) zrpc:7266 Error raised in delayed method
 Traceback (most recent call last):
   File /usr/local/www/Zope/lib/python/ZEO/StorageServer.py, line 991, in run
 result = self._method(*self._args)
   File /usr/local/www/Zope/lib/python/ZEO/StorageServer.py, line 315, in 
 _pack_impl
 self.storage.pack(time, referencesf)
   File /usr/local/www/Zope/lib/python/ZODB/FileStorage.py, line 1582, in 
 pack
 opos = p.pack()
   File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 700, in pack
 self.gc.findReachable()
   File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 456, in 
 findReachable
 self.findReachableAtPacktime([z64])
   File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 531, in 
 findReachableAtP
 acktime
 todo.extend(self.findrefs(pos))
   File /usr/local/www/Zope/lib/python/ZODB/fspack.py, line 604, in findrefs
 return referencesf(self._file.read(dh.plen))
   File /usr/local/www/Zope/lib/python/ZODB/referencesf.py, line 38, in 
 referencesf
 raise ValueError, 'Error unpickling %r' % p
 ValueError: Error unpickling 
 '((U\x0eBTrees.OIBTreeq\x01U\x08OIBucketq\x02tq\x03Nt.((
 U\x05nchenq\x04J\xc6{a\xfeU\x0fnchen/ottobrunnq\x05J\xbd\xeby\xcfU\x04ndigq\x06J\n\xf
 0}QU\x05ndnisq\x07J\xd9\xdc\xbfIU\x02neq\x08J1!\x15\xe9U\x05nebenq\tJT]4\xc0U\x03netq
 \nJ\xf3cU\xb6U\x04net/q\x0bJ\nM\xe5\xd6U\x07networkq\x0cJ\xf5\x85!\xe5U\tnetzartigq\r
 J\xd4\xf9\x906U\x03neuq\x0eJv\xd7\xe9U\x04neueq\x0fJW\xedD\xd8U\x05neuenq\x10J0!\x0
 7U\x05neuesq\x11J\xb9\xa5\xb4sU\x08neuestenq\x12JW2\xcc-U\x07nftigenq\x13J\xd5iU\x0
 3ngeq\x14J%\xa9X\x10U\x06ngerenq\x15J\x1d\x14YU\x04ngigq\x16J\xc4\xe6\xe5\xd4U\x06ng
 igenq\x17J}\xbd\xffpU\nngigkeitenq\x18J)]\x06IU\x05nichtq\x19J\x0bgyU\x07nkungenq\x1
 aJC4\xf7\x10U\x04nnenq\x1bJU\xc4bFU\x04nochq\x1cJ\xb4\xf6\xcdUU\x07norbertq\x1dJ-\xf3
 \xd7\x8fU\x06normenq\x1eJ[\x84\xd4\xaeU\x07normungq\x1fJ\xf4\xe9\xfc\xfcU\x08notebook
 q 
 J\xf7\xf2\x9e\xf9U\x0fnotebookeinsatzq!J`\x8fRiU\tnotebooksqJ\xba\xecvU\x12notebo
 okverwendungq#J_R\x10\x9aU\x02nrq$J\xfcSg\xddU\x05nscheq%J-\x88\xf8\xccU\x06nstigeqJ
 \xa35\x0e\xcdU\x04nterq\'J\xb1\x94\x9b\xeeU\nnumerischeq(Jf\\n\xfeQ

Not that it will help much, but the \x03 on the start of the next line
is the immediate cause of the error (it's in a _position_ where a
pickle opcode is expected, but 0x03 isn't a legitimate pickle
opcode).

 \x03nurq)J\xd2\x95
 C\xf4U\x0cnutzbringendq*J\xd3\x84\x84\xeaU\x06nutzenq+J\xa7^\x86IU\tnutzungsmq,J\xc1\
 xca\xb9LU\x02obq-J\xbe\xb7e\x94U\x06objectq.J\xaaP\x14\xf9U\x04oderq/J\\0\xc2(U\x05od
 imaq0J\xcd\xf9\x0f:t(U\x08\x00\x00\x00\x00\x00%\xa5\xdaq1(U\x0eBTrees.OIBTreeq2U\x08O
 IBucketq3ttq4Qtq5.'
 --

 I've tried to recover the data.fs with fsrecover but it returns
 without error and the error remains.

This is corruption _inside_ an object pickle.  fsrecover can't do
anything about that.  See

http://zope.org/Wikis/ZODB/FileStorageBackup

for background info.

 fsrefs.py terminates with an error.

Yes, fsrefs can't load the pickle either.

 Any idea how to fix the Data.fs.

Sorry, not easily, no.  You need to exploit your application-specific
knowledge about the importance of this specific OIBucket, and couple
that with fiddly knowledge about how pickle works.

 The System is still up an running and no error shown so far.

Maybe you could locate the object in question from an fsdump (see the
link above), and delete the whole object.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )


Re: [Zope] Can one nest macros with slots?

2006-01-25 Thread J Cameron Cooper

Doyon, Jean-Francois wrote:

I can't seem to do this:

use-macro
  fill-slot
define-macro
  ... Some html ...
  define-slot/define-slot
  ... Some html ...
/define-macro
  /fill-slot
/use-macro

Allowing me to nest multiple reusable templates?

I have objects with common interfaces which could easily share templates ...
If I could do this! (The shared template still needs to endup in the
master template).

Or are there other techniques to achieve this?


Macros are decided at compile time so that you can ask a template (which 
is not called) for its macros::


  here/main_template/macros/master

The code above would have macros being created in some other template at 
the time this macros is used, and I cannot imagine how they would be 
available.


Why is a macro with whatever uses your common interfaces not suitable? 
You scenario is too vague for any other advice.


--jcc

--
Building Websites with Plone
http://plonebook.packtpub.com/
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Fwd: Re: [Zope] Structured Text Question]

2006-01-25 Thread J Cameron Cooper

Asad Habib wrote:
Well, this decision was not made by me and I cannot override it. Given 
that I have to use Structured Text, is there a solution to this problem?


You can always write HTML in STX. Just say::

 br /

Or maybe::

 p/p

I would suggest, however, not setting a solution in stone until you know
it meets your requirements.

--jcc


On Wed, 25 Jan 2006, Jaroslav Lukesh wrote:


Is there any way to have multiple lines of empty space between two
sections of text in a Structured Text document? I looked on Google 
but did

not find any answers to this question. However, I did notice that others
had asked the question as well. Is this a shortcoming of Structured 
Text?

Any help would be appreciated. Thanks.



Why?

Use stylesheets or fulltext replacement of some shortword to DIV with
appropriate geometry.


--
Building Websites with Plone
http://plonebook.packtpub.com/
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
http://mail.zope.org/mailman/listinfo/zope-announce

http://mail.zope.org/mailman/listinfo/zope-dev )


[Zope] Re: Zope/Plone logon security strategy etc

2006-01-25 Thread Tino Wildenhain
michael nt milne schrieb:
 Yes I agree, having checked on basic http authentication I need SSL.
 Basic http and cookie auth is insecure. I just feel that zope should
 have this facility even with a self signed certificate, so that you
 could do it without Apache and had more options. The option to even
 just have it on for site logon would be good.

Yes you can do that. There are patches to use SSL directly w/ the
ZServer. But usually its by far not worth the trouble. Apache or
pound as frontend proxy are easy to setup and ease management
and load balancing.
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )