Re: [Zope] Problem with ZSQLMethods/MySQL after update
Thanks a lot for your help, Dieter, Greg, and Andy! Dieter, you were absolutely right about the broken instances. All I had to do was delete ZSQLMethods from my Products folder and restart Zope. Everything was all right after that. Andy and Greg, so far I did not have any problems using mysqlpython 1.2.0 with ZMySQLDA 2.0.8. But since Andy is the expert I now installed 2.0.9b3 and am happy with it. :-) Cheers and thanks again, Ragnar On Tue, 28 Jun 2005 19:43:15 +0200 Dieter Maurer [EMAIL PROTECTED] wrote: Ragnar Beer wrote at 2005-6-27 18:50 +0200: After upgrading Zope from version 2.6.4 to 2.8.0 and mysqlpython from 0.9.2 to 1.2.0 I cannot add or edit ZSQLMethods anymore, although there is an open(MySQL)db-Connection that works just fine with the same ZSQLMethods that cannot be edited or with external methods. The error I'm getting is: There are no SQL database connections. You need to add a Zope SQL database connection before you can edit a Zope SQL Method. Almost surely, your ZMySQLDA instances are broken (and then do not behave as SQL database connection instances). Check your Zope logfile for messages of the form could not install product -- Dieter ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Problem with ZSQLMethods/MySQL after update
Hi everybody! After upgrading Zope from version 2.6.4 to 2.8.0 and mysqlpython from 0.9.2 to 1.2.0 I cannot add or edit ZSQLMethods anymore, although there is an open (MySQL)db-Connection that works just fine with the same ZSQLMethods that cannot be edited or with external methods. The error I'm getting is: There are no SQL database connections. You need to add a Zope SQL database connection before you can edit a Zope SQL Method. This happens only when using my old zope instance (which I need to) but not when using a freshly created zope instance. Is this a known problem? I couldn't find anything in my zope mailing list archive. Cheers, Ragnar P.S.: Here are the contents of my ProductManagement screen: BTreeFolder2 (Installed product BTreeFolder2 (BTreeFolder2-1.0.1)) 2005-06-20 10:35 DocFinderEverywhere (Installed product DocFinderEverywhere (DocFinderEverywhere-0.4.1)) 2003-02-14 08:39 ExternalMethod (Installed product ExternalMethod (External Method-1-0-0)) 2000-10-12 15:51 Five (Installed product Five (Five 1.0.1)) 2005-06-20 10:35 MIMETools (Installed product MIMETools) 2001-01-05 14:31 MailHost (Installed product MailHost (MailHost-1-3-0)) 2003-05-11 23:00 OFSP (Installed product OFSP (OFSP-1-0-0)) 2000-10-12 15:51 PageTemplates (Installed product PageTemplates (PageTemplates-1-4-0)) 2002-05-07 13:53 PluginIndexes (Installed product PluginIndexes) 2001-09-04 13:29 PythonScripts (Installed product PythonScripts (PythonScripts-2-0-0)) 2001-09-04 10:13 Sessions (Installed product Sessions) 2002-05-07 13:53 SiteAccess (Installed product SiteAccess (SiteAccess-2-0-0)) 2001-09-04 11:38 SiteErrorLog (Installed product SiteErrorLog) 2003-02-14 08:39 StandardCacheManagers (Installed product StandardCacheManagers (StandardCacheManagers-1-1-0)) 2001-09-04 10:13 TemporaryFolder (Installed product TemporaryFolder) 2002-05-07 13:53 Transience (Installed product Transience) 2002-05-07 13:53 ZCTextIndex (Installed product ZCTextIndex) 2003-02-14 08:39 ZCatalog (Installed product ZCatalog (ZCatalog-2-2-0)) 2000-10-12 15:51 ZGadflyDA (Installed product ZGadflyDA) 2001-01-05 14:31 ZMySQLDA (Installed product ZMySQLDA (ZMySQLDA 2.0.8)) 2003-11-30 20:17 ZODBMountPoint (Installed product ZODBMountPoint) 2005-06-20 10:36 ZReST (Installed product ZReST (1.1)) 2005-06-20 10:36 ZSQLMethods (Installed product ZSQLMethods) 2000-10-12 15:51 ZopeTutorial (Installed product ZopeTutorial (Zope Tutorial 1.2)) 2005-06-20 10:36 ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD 2.8 problem solved
Start Zope, and you will find that it works fine now. Zope also works fine in the CURRENT tree of OpenBSD, so presumably it will work out-of-the-box on OpenBSD 2.9. This is the safest way of getting it to work at the moment. Did you understand form Jason Ish's message that it should be working with -current or did you compile and test it yourself? I compiled -current last week and it didn't work and there have been no changes to the source since then. Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] Poor programming practice?
What's the go4 book? Ragnar yes I have the go4 book and I fully agree that one or other of the above patterns would be feasible. The problem is that the base medusa comes from Sam Rushing and Zope makes use of it. I guess since I already patch the Zope code I could just extend the patch, but the best solution would come from having two main players agree on such stuff. -- Robin Becker ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD 2.8 problem solved
I understood that the workaround he suggested also works with -current. I submitted the bug a couple of days ago. The ID is 1631 if you want to search for it. Ragnar Ragnar Beer wrote: Did you understand form Jason Ish's message that it should be working with -current or did you compile and test it yourself? I compiled -current last week and it didn't work and there have been no changes to the source since then. I just took his word for it: - python on this system uses /usr/lib/libc_r.so.3.3 hmm, freaky.. works fine on my -current system.. I remember it being a bitch with Zope 2.2.4. well, the management interface works just fine where it was dying before. So if it doesn't work, somebody should notify the OpenBSD people. I assume other Python applications than Zope have problems with this? Alexander Limi. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] RESPONSE.redirect
It's a html meta-tag that does the trick, not http. Look at http://www.geocities.com/siliconvalley/campus/1924/metacom.html. HTH Ragnar Hi all, I'd like to show a page and after a few seconds I'd like to redirect to another page. If I simply add !--#call "RESPONSE.redirect"-- it is done immediately. How can I achieve a delay of a couple of seconds? Oliver ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Editors [OT]
What's speedbar mode? XEmacs (speedbar mode) Any ideas? I had to, love makes you do strange things. Oh, yes indeed ;) Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Buffer overflow in MySQL 3.23.31
Howdy!
Just for us MySQL users I'm forwarding this from bugtraq.
Ragnar
Hi,
all versions of MySQL 3.23.31 have a buffer-overflow which crashs the
server and which seems to be exploitable (ie. 4141414 in eip)
Problem :
An attacker could gain mysqld privileges (gaining access to all the
databases)
Requirements :
You need a valid login/password to exploit this
Solution :
Upgrade to 3.23.31
Proof-of-concept code :
None
Credits :
I'm not the discoverer of this bug
The first public report was made by [EMAIL PROTECTED] via the MySQL
mailing-list
See the following mails for details
Regards,
Nicob
Here the original post to the MySQL mailing-list :
==
On Jan 12, Jo?o Gouveia wrote:
Hi,
I believe i've found a problem in MySql. Here are some test's i've made in
3.22.27 x86( also tested on v3.22.32 - latest stable, although i didn't
debug it, just tested to see if crashes ).Confirmed up to latest 3.23
On one terminal:
quote
spike:/var/mysql # /sbin/init.d/mysql start
Starting service MySQL.
Starting mysqld daemon with databases from /var/mysql
done
spike:/var/mysql #
/quote
On the other terminal:
quote
jroberto@spike:~ mysql -p -e 'select a.'`perl -e'printf("A"x130)'`'.b'
Enter password:
(hanged..^C)
/quote
On the first terminal i got:
quote
spike:/var/mysql # /usr/bin/safe_mysqld: line 149: 15557 Segmentation fault
nohup
$ledir/mysqld --basedir=$MY_BASEDIR_VERSION --datadir=$DATADIR --skip-lockin
g "$@" $err_log 21
Number of processes running now: 0
mysqld restarted on Fri Jan 12 07:10:54 WET 2001
mysqld daemon ended
/quote
gdb shows the following:
quote
(gdb) run
Starting program: /usr/sbin/mysqld
[New Thread 16897 (manager thread)]
[New Thread 16891 (initial thread)]
[New Thread 16898]
/usr/sbin/mysqld: ready for connections
[New Thread 16916]
[Switching to Thread 16916]
Program received signal SIGSEGV, Segmentation fault.
0x41414141 in ?? ()
(gdb) info all-registers
eax0x1 1
ecx0x68 104
edx0x8166947135686471
ebx0x41414141 1094795585
esp0xbf5ff408 0xbf5ff408
ebp0x41414141 0x41414141
esi0x41414141 1094795585
edi0x0 0
eip0x41414141 0x41414141
eflags 0x10246 66118
cs 0x23 35
ss 0x2b 43
ds 0x2b 43
es 0x2b 43
fs 0x0 0
gs 0x0 0
(gdb)
/quote
looks like a tipical overflow to me.
Please reply asap, at least to tell me i'me not seeing things. :-)
Best regards,
Joao Gouveia aka Tharbad.
[EMAIL PROTECTED]
Here the reponse to a email I send today to the MySQL list :
Sergei Golubchik (MySQL team) wrote :
Hi!
On Jan 18, Nicolas GREGOIRE wrote:
Hi,
Still not any info about the buffer-overflow discovered last week ?
Shouldn't be fixed at the beginning of the week ?
Please, dear MySQL team, give us info !!
Regards,
Nicob
Fixed in latest release (3.23.31).
Regards,
Sergei
Here an part of the 3.23.30 to 3.23.31 diff :
=
+Changes in release 3.23.31
+--
+
+ * Fixed security bug in something (please upgrade if you are using a
+ earlier MySQL 3.23 version).
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Tools used for programming Zope
Can Dreamweaver also use the https protocol for WebDAVing? Ragnar Apart from that, look at using an FTP or WebDAV enabled editor like DreamWeaver. It works now, but support is supposed to be getting better in Zope 2.3 cheers, Chris ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Zope and Linux flavors
Howdy Zopistas! These days I came to the conclusion that I might need to investigate a bit on Linux as an alternative base for running Zope. So far I've been using OpenBSD which is a real timesaver when it comes to setting up a secure server which is my first priority over anything else. What I'd like to know is: Which Linux distributions are you using for running Zope and how easy it was for you to maximize security of your server? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] OpenBSD 2.8 woes
Seems you already found out what's wrong. Why didn't you post anything on the OBSD misc list so that they can fix it? Ragnar Hello Jan: I don't really know what else I could do. Right now it looks pretty much as if I'm going to switch to FreeBSD, my second favourite :-| Has anyone got Zope 2.2.5 running under OpenBSD 2.8??? If so, I'd be really curious what steps you followed to get it to work.- You will have to use FreeBSD or use OpenBSD 2.7. 2.8 will not work because there is a bug in the threading library included with OpenBSD 2.8. Zope triggers it when you call the management screen. However, in the Zope code for the management screens there are "thread-safe" calls used which are not, as far as I know, used elsewhere in Zope. Maybe there is a bug in that code? But for now I believe the bug to be in OpenBSD 2.8. I have not found anything to suggest that it has been fixed or looked at. None of the patches released so far for 2.8 mention it. I went through this in early December. Luke ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] OpenBSD 2.8 woes
Whereas I couldn't reproduce the error in a prior thread this time I can. On my OBSD 2.8 machine running python 1.52 -with-thread CPU load goes up to 99% when I try to access the management screens. There was a discussion on the OBSD ports list to create a 1.52 port. Did you check whether there is and whether that's solving the problem? Ragnar Hello, Could anybody enlighten me??? I don't know Python (yet), so the tracebacks are not too informative for me ... Are you using Python 2.0? It's not yet compatible with Zope, though efforts are being made. Just enter "python" to find out. No, I'm not. At first I tried to take the version that comes shipped as a package with OpenBSD 2.8, which is 1.6 with tk and threads compiled in (at least that's what the package name suggests). When that didn't work, I pkg_deleted the package and then downloaded the 1.52 as noted in the Zope specs, compiled and installed it - it seemed to run, but Zope cr***ed out with a python.core after trying to access the management screen. The machine itself definitely is okay, techwise. The python compilation and installation didn't show any errors. The OpenBSD installation is totally virgin otherwise. I don't really know what else I could do. Right now it looks pretty much as if I'm going to switch to FreeBSD, my second favourite :-| Has anyone got Zope 2.2.5 running under OpenBSD 2.8??? If so, I'd be really curious what steps you followed to get it to work.- Cheers, Jan -- Radio HUNDERT,6 Medien GmbH Berlin - EDV - [EMAIL PROTECTED] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Caching/http-acceleration and proxying Zope-served content
I started using mod_proxy, because I needed the configuration options (redirection etc.) and squid wouldn't cache ssl stuff. It's running very well since about six months now. The downside is that it's really badly documented. BTW there is a new book by Ralf Engelschall that you can download for free from http://www.apacheref.com that also covers mod_proxy. Not in detail though. He calls mod_proxy apache's stepchild. Concerning numbers I gave some in my caching with mod_proxy howto (http://www.zope.org/Members/rbeer/caching). Ragnar Hmm. That's been my thought on squid as well, given its ground-up design for caching in the first place. My worry, though, is that with squid I lose support for virtual hosts on seperate boxes, because I need to support Zope, static content, and some legacy stuff running ColdFusion on an NT box. My impression is that Squid's http accelerator mode (inverse transparent proxy, or whatever you want to call it) is somewhat of an afterthought compared to the standard proxy use case. If it supports the ability to direct traffic based upon the virtual host address, then squid works - if not, I think I have to go the Apache route... I also wonder just how good Apache's mod_proxy caching is? Any thoughts? Sean -Original Message- From: Shane Hathaway [mailto:[EMAIL PROTECTED]] Sent: Monday, January 08, 2001 12:59 PM To: [EMAIL PROTECTED] Subject: Re: [Zope] Caching/http-acceleration and proxying Zope-served content [EMAIL PROTECTED] wrote: I have a question, for anyone experienced in working with Zope and caching proxies: I'm setting up a load-balanced server farm that has nodes that will run Apache and proxy (via mod_proxy) to ZEO clients running ZServer. This farm is routed (both ways) through a layer 4 load-balancing appliance, and all these boxes (both nodes and the balancer) are sitting inside a DMZ with private IP addresses. The public world will access these servers via a firewall box running transparent proxy (actually, I guess, similar to squid's http_accel mode; the semantics here are a bit tricky, as it's more of a inverse trans-proxy). Between Apache and Zope, there would be several virtual hosts, and I'd be using the SiteAccess product. It gets a bit tricky in that I need to access several different virtual hosts inside the DMZ (one for the ZEO farm, and another for a dedicated CGI-based ad server on another box) via the proxy. A more detailed (ascii art) diagram of what I am trying to do, is at http://209.132.8.98/server_ascii_art.txt My question is this: does anybody have any thoughts on the merits of Squid (http accelerator mode) versus Apache/mod_proxy in terms of caching, virtual hosts, and the like when working with Zope sites? Any big pitfalls to this kind of setup with Zope sites? I would prefer Squid since its only purpose in life is caching. It follows the "do one thing and do it well" mantra. But whatever your choice, I hope you make use of the new CacheManagement feature in Zope 2.3. It is designed to make things like this straightforward and easy. There's a recent news announcement that links to everything you need--including complete help docs! Shane ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Adding many users
Howdy Zopistas and happy new year! I need to add about 150 users to an acl_users folder and I wouldn't like to do it manually since the data already exists in a python list. What would be an elegant way to add them all with a python script? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: running zope with OpenBSD 2.8 i386
I still got it under construction. Zope shouldn't work with Python 1.6 so I removed the package and downloaded the python 1.5.2 sources you ./configure --with-thread to have threads enabled and that's it. Runs beautifully but I didn't have time to install Zope so far. It's running very well under OBSD 2.7 but that version has a python 1.5.2 package. Viel Spass! Ragnar hi .. I want to switch my webserver from linux 2.2.15 to OpenBSD 2.8. On the linux machine I am running the zope webserver. I tried to let it run with my OpenBSD home-installation, but it doesn't work. It compiles slightly and starts up. When I connect to it it asks me for the superuser account. Then I try to login but I get a lot of error messages (python related, so maybe the port "python-1.6-threads" is buggy?). My question is: Did someone of you got zope running with obsd 2.8? The documentation of zope says it runs in any case with 2.7 and python 1.6 ... (I tried the above on 2 machines, both obsd 2.8, both the same errors) thanks for reading ... MfG -- Rene Lange ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Squishdot with access restrictions
Howdy Zopistas! Has anyone installed a Squishdot site with access restrictions? I've got the problem that as soon as I take away the "view" and "access contents information" permission from the anonymous user in my Squishdot site I cannot use the search interface anymore but only get KeyErrors (icon or thread_path depending on which permission I take away). I'm using Squishdot 0.7.2 and Zope 2.2.2. Any help appreciated! Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Indirect addressing
Howdy Zopistas! I have a directory structure like this: + myfolder index_html my_external_method dtml_method_1 dtml_method_2 ... In index_html I want to include either dtml_method_1 or dtml_method_2, ... (one method for every week of year). my_external_method tells me which dtml_method to include. This would logically be handled with "dtml-var dtml-var my_external_method" in index_html but this doesn't work. How could I get this working? Any ideas? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] [ot] python book
I read Learning Python and still love it and would highly recommend it. The book is very good! Apart from that I'm using the Python Essential Reference more often nowadays. It's handier than a printout of the lib.pdf but actually you don't really need if if you are comfy with the pdf stuff. What I'm still missing is something like the perl cookbook but for Python :( Ragnar Hi, I'm going through the tutorials available on Python.org but can anyone recommend a good book? I've always been impressed by O'Reilly's books and I see that there are a number of them available: - Python Programming on Win32 - Learning Python - Programming Python Which one of the above (or indeed, any others) would be best for me? Me? I've got some C experience and will be using Python with Zope to create a portal, some simple apps. Any advice would be greatly appreciated. - Best regards, Lee ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] login dialog text
Hi Zopistas! When users connect to a restricted area a dialog box pops up that looks more or less like this: Enter user name for Zope at myhost: User: _ Password: _ Where and how can I change the content of the first line so that it would e.g. read "Enter user name for funky stuff at myhost"? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] login dialog text
Thanks a lot! Do you know whether it's also possible to set a folder based variable within Zope to allow for different messages when logging into different folders? Ragnar On Thu, 30 Nov 2000, Ragnar Beer wrote: Hi Zopistas! When users connect to a restricted area a dialog box pops up that looks more or less like this: Enter user name for Zope at myhost: User: _ Password: _ Where and how can I change the content of the first line so that it would e.g. read "Enter user name for funky stuff at myhost"? you can put the following in your start script somewhere before the exec Z_REALM='my funky stuff' export Z_REALM HTH, Stefan ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] ZMySQL and MySQLdb Versions
Howdy! When I go to the download section on zope.org looking for a way to connect Zope and MySQL I can find the following: - Zope MySQL Database Adapter, 2000/07/20 by mordred (ZMySQLDA-1.2.0.tar.gz) - ZMySQLDA, 2000/07/20 by MikeP (ZMySQLDA-1.1.3-nonbin.tar.gz) - An Interface for MySQL, 2000/07/20 by adustman (MySQLdb-0.1.2.tar.gz) Now how should anybody new to Zope know what to use? Especially when ZMySQLDA goes up to at least version 2.0.0 (I tried to look it up but couldn't connect to starship.python.net) and MySQLdb at least to version 0.2.1. I'm still using ZMySQLDA 1.1.3 with MySQLdb 0.1.3 which can't be found in the download section. Confusing, isn't it? What could we possibly do about it? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] IIS and Zope share same problem :-S
As I already suggested ages ;) ago (and still didn't put into practice) it would here again be best to deny everything that isn't explicitly allowed (e.g. allow whatever ends with _html or .html and deny everything else) but then I would have to go over the whole website and make bazillions of changes ... I fixed the problem temporarily by adding some "FilesMatch/LocationMatch + deny from all" in my httpd.conf. But what else do I have to deny apart from objectIds? Ragnar Andrew Kenneth Milton wrote: | | http://www.zope.org/standard_html_header for example ;-) Not that old chestnut again... Yes, that old chestnut again. If it's considered a serious security flaw by Microsoft, maybe the Zope community should finally do something to solve it. ...and yes, there are discussions about this on Zope-dev right now, which will hopefully produce a solution :-) cheers, Chris ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Migrating from 2.1.6 to 2.2.2
Take a look at http://www.zope.org/Products/Zope/2.2.0/upgrading_to_220. Ragnar I have a Zope based web site running under 2.1.6. I want to move it to a different machine which will be running 2.2.2. Can someone identify the steps I need to take to make this move? What things do I need to be aware of in moving between these versions? Do I just need to copy the data.fs along with any required product files, or do I need move/configure other things. Thanks. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] acl_users mystery
Howdy! I had a strange problem today: I added a Role "User" in the root's security tab and gave it a couple of permissions. But further down the tree in /de/support where in the acl_users folder I added a user with the role 'User' the permissions where not acquired (until set manually in the /de/support security tab I couldn't log in) although 'Acquire permission settings' was turned on all the way down the tree. Very mysterious. Did I misunderstand the whole idea or is there something wrong? (Zope 2.1.6) Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Caching How-To (was Cache concerns (was zope/proxy_passconfiguration problem)configuration problem)
During the last couple of days I could finally figure out how to set
up caching with mod_proxy. This morning I put together a caching
howto and submitted it for review.
If it's accepted it will be available under
http://www.zope.org/Members/rbeer/caching
I'm going on holiday now (Crete: wonderful greek island) and I'm
going without my laptop so I won't answer any emails for the next two
weeks ;)
Ragnar
Ragnar,
Caching is a subject I'm not all that familiar with but one I need to learn
really fast. My site is about to go live, and I have a monster of a query
that will bring my system to its knees if 100 students run it at a time. So
I'm sending this off to the Zope mailing list wondering if anyone can give
us some caching/performance tips.
- T.J.
-Original Message-
From: Ragnar Beer [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 02, 2000 12:48 PM
To: T.J. Mannos
Subject: RE: [Zope] zope/proxy_pass configuration problem
Very good idea! I tried it and it works like a charm :) Thanks a lot!
One problem is left over: apache doesn't cache the documents although I have
dtml-call "RESPONSE.setHeader('Expires',
_.DateTime(_.DateTime().timeTime() + 3600).toZone('GMT').rfc822())"
in my standard_html_header. ab -n 100 -c 1
http://www.dummy.com/index_html shows 100 queries in Z2.log where
there should be only one.
What could I be doing wrong?
Ragnar
Ragnar,
If you're referring to my ZServer+Apache+SSL HOWTO, this would be a
problem.
Going in through https will only give you access to the 'ssl' directory.
The quick dirty solution (while retaining the ability to distinguish
between http and https) is to reverse the setup, i.e. place the https
SiteRoot in the main folder and create a separate folder called, say,
'http', which holds the http SiteRoot. This solution will kill two birds
with one stone: it will grant access to the entire site via https while
restricting http users to an empty subdirectory.
Hope this helps,
T.J.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ragnar Beer
Sent: Wednesday, August 02, 2000 1:30 AM
To: [EMAIL PROTECTED]
Subject: [Zope] zope/proxy_pass configuration problem
Hi Zope-Configuristas!
I would finally like to say goodbye to pcgi but one thing keeps me
hooked. I tried and tried but the solution just won't appear. Here is
the problem:
I have a site that is supposed to be reachable via http as well as
via https. That's not a problem per se. Configuration of zope with
proxy_pass is easy as can be. The problem is that management shall be
possible via https _only_ (for obvious reasons). But as soon as I use
site access to define the http-branch this branch is not
managable/accessable via https any more. Is there a solution?
Ragnar
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Caching How-To (was Cache concerns (waszope/proxy_pass configuration problem) configuration problem)
Cool! I took a quick look at it and I think they fit together quiete nicely. In your howto you wrote "Some people have reported success with Apache using ProxyPass". This is exactly what my howto is about. Perhaps you could set a link? Ragnar On Fri, 4 Aug 2000 12:33:53 +0200, Ragnar Beer [EMAIL PROTECTED] wrote: During the last couple of days I could finally figure out how to set up caching with mod_proxy. This morning I put together a caching howto and submitted it for review. If it's accepted it will be available under http://www.zope.org/Members/rbeer/caching Hey really? Me too. http://www.zope.org/Members/htrd/howto/caching Toby Dickenson [EMAIL PROTECTED] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] tree plus/minus url
I found quite an easy solution for Zope 2.1.6:
In lib/python/TreeDisplay/TreeTag.py you have to replace the "old
code" with the "new code". (Blame me - I forgot to make a copy
beforehands which keeps me from using diff.)
The idea is to "export" the piece of code that puts together the url
to treeData['tree-item-clickurl'] so that you can access it with
dtml-var tree-item-clickurl within your tree-tag. I haven't checked
this for unwanted side effects. Perhaps someone more familiar with
the zope code could do that? For me it works fine!
Ragnar
Line 372:
# Mostly inline encode_seq for speed
s=compress(str(diff))
if len(s) 57: s=encode_str(s)
else:
s=b2a_base64(s)[:-1]
l=find(s,'=')
if l = 0: s=s[:l]
s=translate(s, tplus)
script=md['SCRIPT_NAME']
# old code
#if exp:
#treeData['tree-item-expanded']=1
#output('A NAME="%s" HREF="%s?tree-c=%s#%s"'
# 'IMG SRC="%s/p_/mi" ALT="-" BORDER=0/A' %
# (id, root_url, s, id, script))
#else:
#output('A NAME="%s" HREF="%s?tree-e=%s#%s"'
# 'IMG SRC="%s/p_/pl" ALT="+" BORDER=0/A' %
# (id, root_url, s, id, script))
# end of old code
# New code
if exp:
treeData['tree-item-clickurl']= '%s?tree-c=%s#%s' %
(root_url, s, id)
treeData['tree-item-expanded']=1
output('A NAME="%s" HREF="%s"'
'IMG SRC="%s/p_/mi" ALT="-" BORDER=0/A' %
(id, treeData['tree-item-clickurl'], script))
else:
treeData['tree-item-clickurl']= '%s?tree-e=%s#%s' %
(root_url, s, id)
output('A NAME="%s" HREF="%s"'
'IMG SRC="%s/p_/pl" ALT="+" BORDER=0/A' %
(id, treeData['tree-item-clickurl'], script))
# end of new code
output('/TD\n')
else:
if level 2: output(_td_colspan % level)
elif level 0: output(_td_single * level)
output(_td_single)
output('\n')
Ragnar Beer wrote:
Howdy!
I've been experimenting with trees for a while and discovered that
almost all innocent first time clickers were clicking on the text
_behind_ the plus and minus images instead on the images themselves.
So I decided to make the text a link with the same url as the image
has but I can't find the right variable. Where is that url stored?
Can anybody help?
Your best bet is to look in the source for the tree tag and see how it's
done there:
/lib/python/TreeDisplay/TreeTag.py
cheers,
Chris
PS: Please post back to the list if you find out how ;-)
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] zope/proxy_pass configuration problem
Hi Zope-Configuristas! I would finally like to say goodbye to pcgi but one thing keeps me hooked. I tried and tried but the solution just won't appear. Here is the problem: I have a site that is supposed to be reachable via http as well as via https. That's not a problem per se. Configuration of zope with proxy_pass is easy as can be. The problem is that management shall be possible via https _only_ (for obvious reasons). But as soon as I use site access to define the http-branch this branch is not managable/accessable via https any more. Is there a solution? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] zope/proxy_pass configuration problem
Very good idea! I tried it and it works like a charm :) Thanks a lot!
One problem is left over: apache doesn't cache the documents although I have
dtml-call "RESPONSE.setHeader('Expires',
_.DateTime(_.DateTime().timeTime() + 3600).toZone('GMT').rfc822())"
in my standard_html_header. ab -n 100 -c 1
http://www.dummy.com/index_html shows 100 queries in Z2.log where
there should be only one.
What could I be doing wrong?
Ragnar
Ragnar,
If you're referring to my ZServer+Apache+SSL HOWTO, this would be a problem.
Going in through https will only give you access to the 'ssl' directory.
The quick dirty solution (while retaining the ability to distinguish
between http and https) is to reverse the setup, i.e. place the https
SiteRoot in the main folder and create a separate folder called, say,
'http', which holds the http SiteRoot. This solution will kill two birds
with one stone: it will grant access to the entire site via https while
restricting http users to an empty subdirectory.
Hope this helps,
T.J.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ragnar Beer
Sent: Wednesday, August 02, 2000 1:30 AM
To: [EMAIL PROTECTED]
Subject: [Zope] zope/proxy_pass configuration problem
Hi Zope-Configuristas!
I would finally like to say goodbye to pcgi but one thing keeps me
hooked. I tried and tried but the solution just won't appear. Here is
the problem:
I have a site that is supposed to be reachable via http as well as
via https. That's not a problem per se. Configuration of zope with
proxy_pass is easy as can be. The problem is that management shall be
possible via https _only_ (for obvious reasons). But as soon as I use
site access to define the http-branch this branch is not
managable/accessable via https any more. Is there a solution?
Ragnar
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] tree plus/minus url
Howdy! I've been experimenting with trees for a while and discovered that almost all innocent first time clickers were clicking on the text _behind_ the plus and minus images instead on the images themselves. So I decided to make the text a link with the same url as the image has but I can't find the right variable. Where is that url stored? Can anybody help? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] 2.2 installation problem on Linux
I tried, but got a segmentation fault in the ./configure step. Never happened to me so far. Anybody else? --Ragnar Hello, At 19:26 15.07.2000 +, Ragnar Beer wrote: Zope 2.2 (linux2) installs and works fine using ZServer but for whatever reason there is no pcgi-wrapper built in the pcgi dir so that I cannot call Zope.cgi. I checked again and again but ./install doesn't give an error message. What am I doing wrong? It seems they forgot to compile the PCGI wrapper... here is what you should do to make it work: -- cd pcgi sh ./configure make - Worked fine for me. Best regards, Gérard Métrailler Jr. Meeting Maker Inc. ... the intelligent choice for collaborative scheduling Email: [EMAIL PROTECTED] Web: http://www.meetingmaker.com ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Squid and SSL
Howdy! Has anybody already successfully tried squid-2.4-DEVEL2 with the SSL patch from squid.sourceforge.net to make Squid an SSL-frontend for Zope? browser --https- squid --http- zserver internet localhost --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] automatic link adjustment
Howdy Zopistas out there! I just ran into some kind of administrative problem: my students are not so willing anymore when it comes to changing links for the third revision of our website. There are about 200 links to change manually and they have my full sympathy. Apart from that this process is quite error-prone and always needs a lot of testing. Is it possible to have automatic link adjustment in Zope if you change an objects name? I mean like in Dreamweaver or whatever website management programm so that it would ask whether to adjust the referring links if you change a page's name? I know we could do the management partly with Dreamweaver and put the files via ftp but whatever sends cleartext passwords is not an option. So ftp is out. Any other way? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Number of zope processes on Linux and OpenBSD
Howdy! I have a question concerning the number of running zope processes: I used to run Zope under Linux and there was always more than a handful of zope processes running. Now I switched to OpenBSD and there is only one. How comes? I guess the more zope processes I have running the more requests I can satisfy? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] too many open files
Help! Zope 2.1.6 refuses to work in the middle of an external method on my i386 running under OpenBSD 2.7. Is says: OSError [Errno 24] Too many open files: '[EMAIL PROTECTED]' I've never ever seen this problem before and this external method used to work well until some minutes ago. Now the error keeps reappearing even after rebooting and also other external methods that used to run well now deliver the same message. Does anybody have suggestions how to diagnose/cure this problem? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD
Don't use the version from the ports tree. That's absolutely right. Use the package instead! You can simply ftp the python-1.5.2 package from ftp.openbsd.org or one of its mirrors. This way it took me about 5 minutes to get Zope running from source under OpenBSD 2.6 on an i386. No need to build Python yourself:) --Ragnar Build and install Python yourself -- the ports tree that comes with the OpenBSD 2.6 disk builds an older version of Python. Then download, build and install your own copy of Zope from the source version. It's actually VERY EASY to build and install Zope from the source, I recommend that everybody learn that method. dave Kevin Schaefer wrote: I have read great things about OpenBSD's security and would like to build a dedicated server just for Zope/MySQL. Any suggestions before I embark into this? ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] security issues
I will soon have a Zope-site ready to go online. How can I make shure that I did everything (concerning Zope) to stop intruders? Where can I find information about protecting a Zope-site? Has anyone had security problems so far? Easiest (most brutal?) fix I've found - hide Zope behind an Apache, and prohibit access to any URLs of the form .*/manage.* This is what I'm doing at the moment (more or less) but your question made me think. Actually this is an example of "allow anything that isn't explicitly denied" which is not a very good policy if you want security. I remember (but - darn - can't remember where I have it) a posting that said that anyone can easily see the names of all objects in a folder which is nice intelligence gathering. I guess it would be much better (and even more brutal;) to deny everything that isn't allowed explicitly. I'll try that later. I think I'll have to allow .*_html and .*_img for the http protocol plus all the .*/manage.* stuff for https and perhaps also make some (not so secure) restrictions based on ip adresses. --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
