[Zope-dev] Location of common criteria documentation
Hi, we're (still/again/...) working on the common criteria project. We're in a mode to try to finish it up and get done with. I feel that Zope3/trunk/doc/security is not the right location for those documents. I'd move them to a top level project in svn or something like Zope3/common-criteria/. Oppinions? Christian -- gocept gmbh co. kg - forsterstrasse 29 - 06112 halle (saale) - germany www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 - fax +49 345 122 9889 1 - zope and plone consulting and development signature.asc Description: Dies ist ein digital signierter Nachrichtenteil ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope 3.3 common criteria derivative
Hi, the common criteria evaluation is using zc`s Sharing security policy. I need to specify a version number/name that describes the release to be evaluated. The most straight forward thing I can think of is to create a branch derived from the 3.3 release series that includes zc.sharing and is configured for using it in the common criteria evaluated way. A name proposal would be Zope 3 Common Criteria Edition. The question would be whether to let it have it's own version number (1.0) or to start from the version number of Zope 3.3 that it was built on. Comments? Christian -- gocept gmbh co. kg - forsterstrasse 29 - 06112 halle (saale) - germany www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 - fax +49 345 122 9889 1 - zope and plone consulting and development signature.asc Description: Dies ist ein digital signierter Nachrichtenteil ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 3.3 common criteria derivative
On Wednesday 07 November 2007, Christian Theune wrote: A name proposal would be Zope 3 Common Criteria Edition. The question would be whether to let it have it's own version number (1.0) or to start from the version number of Zope 3.3 that it was built on. I think it would be okay to start at 1.0; It is a important accomplishment and would confuse people less, I think. My question would be, with Zope being split into packages now, would it not be easier to do the security evaluation based on a set of eggs? It would entail less code that needs to be reviewed. Regards, Stephan -- Stephan Richter CBU Physics Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Location of common criteria documentation
On Wednesday 07 November 2007, Christian Theune wrote: we're (still/again/...) working on the common criteria project. We're in a mode to try to finish it up and get done with. Yipee. I feel that Zope3/trunk/doc/security is not the right location for those documents. I'd move them to a top level project in svn or something like Zope3/common-criteria/. I would prefer a top level directory, like common-criteria. Regards, Stephan -- Stephan Richter CBU Physics Chemistry (B.S.) / Tufts Physics (Ph.D. student) Web2k - Web Software Design, Development and Training ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 3.3 common criteria derivative
Hey, Am Mittwoch, den 07.11.2007, 06:04 -0500 schrieb Stephan Richter: On Wednesday 07 November 2007, Christian Theune wrote: A name proposal would be Zope 3 Common Criteria Edition. The question would be whether to let it have it's own version number (1.0) or to start from the version number of Zope 3.3 that it was built on. I think it would be okay to start at 1.0; It is a important accomplishment and would confuse people less, I think. My question would be, with Zope being split into packages now, would it not be easier to do the security evaluation based on a set of eggs? It would entail less code that needs to be reviewed. Yes it would be but we're way too far down the road and really just want to get finished what we started. Christian -- gocept gmbh co. kg - forsterstrasse 29 - 06112 halle (saale) - germany www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 - fax +49 345 122 9889 1 - zope and plone consulting and development signature.asc Description: Dies ist ein digital signierter Nachrichtenteil ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Zope Tests: 5 OK
Summary of messages to the zope-tests list. Period Tue Nov 6 13:00:00 2007 UTC to Wed Nov 7 13:00:00 2007 UTC. There were 5 messages: 5 from Zope Unit Tests. Tests passed OK --- Subject: OK : Zope-2.7 Python-2.3.6 : Linux From: Zope Unit Tests Date: Tue Nov 6 20:53:19 EST 2007 URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008606.html Subject: OK : Zope-2.8 Python-2.3.6 : Linux From: Zope Unit Tests Date: Tue Nov 6 20:54:49 EST 2007 URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008607.html Subject: OK : Zope-2.9 Python-2.4.4 : Linux From: Zope Unit Tests Date: Tue Nov 6 20:56:20 EST 2007 URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008608.html Subject: OK : Zope-2.10 Python-2.4.4 : Linux From: Zope Unit Tests Date: Tue Nov 6 20:57:50 EST 2007 URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008609.html Subject: OK : Zope-trunk Python-2.4.4 : Linux From: Zope Unit Tests Date: Tue Nov 6 20:59:20 EST 2007 URL: http://mail.zope.org/pipermail/zope-tests/2007-November/008610.html ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 3.3 common criteria derivative
Hi, Am Mittwoch, den 07.11.2007, 10:03 -0500 schrieb Jim Fulton: On Nov 7, 2007, at 4:47 AM, Christian Theune wrote: Hi, the common criteria evaluation is using zc`s Sharing security policy. I need to specify a version number/name that describes the release to be evaluated. I'm sad to say that, while I still like this security policy, we're no longer using it, which probably means no one is using it. I already somewhat suspected that but I do think it's still useful and I'll continue using it for the sake of getting done. I apologize for pointing you in that direction. I sadly recommend using the standard security policy. Of course, you're welcome to keep using the sharing security policy. maybe that's easier at this point. No worries. I feel the same and except from deriving from the standard back then nobody could have predicted this. I *was* thinking about switching but that would make me rewrite large parts. I'll go down that road. Thanks for the heads-up! Christian -- gocept gmbh co. kg - forsterstrasse 29 - 06112 halle (saale) - germany www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 - fax +49 345 122 9889 1 - zope and plone consulting and development signature.asc Description: Dies ist ein digital signierter Nachrichtenteil ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope-dev] Zope 3.3 common criteria derivative
On Nov 7, 2007, at 4:47 AM, Christian Theune wrote: Hi, the common criteria evaluation is using zc`s Sharing security policy. I need to specify a version number/name that describes the release to be evaluated. I'm sad to say that, while I still like this security policy, we're no longer using it, which probably means no one is using it. I apologize for pointing you in that direction. I sadly recommend using the standard security policy. Of course, you're welcome to keep using the sharing security policy. maybe that's easier at this point. Jim -- Jim Fulton Zope Corporation ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Duplicate directive registration allowed
In zope/configuration/config.py:register it seems that it isn't being asserted that no previous registration of a directive with the same name has happened. This might be desirable (not sure why) and currently happens for these directives: ('http://namespaces.zope.org/meta', u'directive') ('http://namespaces.zope.org/meta', u'groupingDirective') ('http://namespaces.zope.org/meta', u'complexDirective') ('http://namespaces.zope.org/zope', u'securityPolicy') This is on Zope 2.10. So for instance, if Five registers the browser:viewlet then there's nothing to prevent another package from including zope.viewlet's meta.zcml which will then override that directive, breaking viewlet support on Zope 2.10. \malthe ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
[Zope-dev] Re: [Checkins] SVN: zope.file/trunk/ Make a good package out of this package.
On 02.11.2007, at 15:43, Benji York wrote: Stephan Richter wrote: zope.file was the *only* package of the 150+ I worked on that did not have extras. I'm surprised. I thought it was generally agreed upon not to do that. Darn. no - afaik there is no agreement upon this, and imho it is not good to put extras in the general deps because one always ends up fetching all the zope packages as deps if using any zope.* package -100 from me for removing extras -- Benji York Senior Software Engineer Zope Corporation ___ Checkins mailing list [EMAIL PROTECTED] http://mail.zope.org/mailman/listinfo/checkins -- Lovely Systems, senior developer phone: +43 5572 908060, fax: +43 5572 908060-77 Schmelzhütterstraße 26a, 6850 Dornbirn, Austria skype: bernd.dorn ___ Zope-Dev maillist - Zope-Dev@zope.org http://mail.zope.org/mailman/listinfo/zope-dev ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope )
Re: [Zope] is it possible to bypass ZSQL methods and call storedprocedures in sqlserver straight from ZPT?
+---[ michael nt milne ]-- | ok thanks. I guess then if you're using the ZMI could you embed this in your | ZPT? But I guess that is not best practice. Using the ZMI you'd make a Python Script to call from your ZPT instead. -- Andrew Milton [EMAIL PROTECTED] ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] is it possible to bypass ZSQL methods and call storedprocedures in sqlserver straight from ZPT?
ok thanks. I guess then if you're using the ZMI could you embed this in your ZPT? But I guess that is not best practice. On 11/6/07, Andrew Milton [EMAIL PROTECTED] wrote: +---[ michael nt milne ]-- | thanks. Is there an example or a tutorial at all on this anywhere? # queryConnection holds the id of a DA connectionObject=getattr(self, queryConnection) connection = connectionObject() results = connection.query(SQL_GOES_HERE) This is from Product code, it should be usable (s/self/context/) in a PythonScript, but, I haven't tested it. -- Andrew Milton [EMAIL PROTECTED] -- michael ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: repozo.py problems
Jim Dibb, on 2007-11-07: I'm going to dig up something that's really troubling me today, and a Martin Koekenberg in the past. Martin first posted the following about repozo.py. Traceback (most recent call last): File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 76, in module from ZODB.FileStorage import FileStorage ImportError: No module named ZODB.FileStorage I must say I saw this error today as well on a Linux server. But when I ran the same repozo command again two seconds later it *did* work. Very strange. Apparently you are less lucky. :-/ No idea for how to solve this, sorry. -- Maurits van Rees | http://maurits.vanrees.org/ [NL] Work | http://zestsoftware.nl/ Do not worry about your difficulties in computers, I can assure you mine are still greater. ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] five zcml addview question
I am trying to create simple content type with zope 2.10.4 and five. I have performed the following: - created a content interface - created a content type class implementing the interface and extending both Persistent and SimpleItem - created zcml class entries for the content type - created zcml browser entries for 'addform' and 'editform' I am trying to get Zope to automatically create the forms based on the content schema. Once these steps were completed, I found my content type in the ZMI add menu. However, once I selected my content type, I got an error (see below). The error looks like it is missing a 'main_template' object. Any ideas what might be wrong? ERROR MESSAGE: 2007-11-07 12:31:01 ERROR Zope.SiteErrorLog http://localhost:8080/+/Password_add Traceback (innermost last): Module ZPublisher.Publish, line 119, in publish Module ZPublisher.mapply, line 88, in mapply Module ZPublisher.Publish, line 42, in call_object Module Products.Five.browser.metaconfigure, line 417, in __call__ Module Shared.DC.Scripts.Bindings, line 313, in __call__ Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec Module Products.PageTemplates.PageTemplateFile, line 129, in _exec Module Products.PageTemplates.PageTemplate, line 89, in pt_render Module zope.pagetemplate.pagetemplate, line 117, in pt_render - Warning: Macro expansion failed - Warning: exceptions.KeyError: 'main_template' Module zope.tal.talinterpreter, line 271, in __call__ Module zope.tal.talinterpreter, line 346, in interpret Module zope.tal.talinterpreter, line 891, in do_useMacro Module zope.tal.talinterpreter, line 346, in interpret Module zope.tal.talinterpreter, line 536, in do_optTag_tal Module zope.tal.talinterpreter, line 521, in do_optTag Module zope.tal.talinterpreter, line 516, in no_tag Module zope.tal.talinterpreter, line 346, in interpret Module zope.tal.talinterpreter, line 870, in do_useMacro Module zope.tales.tales, line 696, in evaluate - URL: index - Line 2, Column 1 - Expression: PathExpr standard:'context/main_template/macros/master' - Names: {'container': + at /, 'context': + at /, 'default': object object at 0x0099F528, 'here': + at /, 'loop': {}, 'nothing': None, 'options': {'args': (Products.Five.metaclass.SimpleViewClass from add.pt object at 0x05D4C710,)}, 'repeat': Products.PageTemplates.Expressions.SafeMapping object at 0x05D 49D78, 'request': HTTPRequest, URL=http://localhost:8080/+/Password_add, 'root': Application at , 'template': ImplicitAcquirerWrapper object at 0x05D4CDB0, 'traverse_subpath': [], 'user': User 'admin', 'view': Products.Five.metaclass.SimpleViewClass from add.pt object at 0x 05D4C710, 'views': zope.app.pagetemplate.viewpagetemplatefile.ViewMapper object at 0x05D4CD50} Module zope.tales.expressions, line 217, in __call__ Module Products.PageTemplates.Expressions, line 153, in _eval Module zope.tales.expressions, line 124, in _eval Module Products.PageTemplates.Expressions, line 100, in trustedBoboAwareZopeTr averse Module OFS.Traversable, line 284, in unrestrictedTraverse - __traceback_info__: ([], 'main_template') KeyError: 'main_template' ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] repozo.py problems
I'm going to dig up something that's really troubling me today, and a Martin Koekenberg in the past. Martin first posted the following about repozo.py. Traceback (most recent call last): File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 76, in module from ZODB.FileStorage import FileStorage ImportError: No module named ZODB.FileStorage Which, it was noted was a problem with PYTHONPATH not being set. One question I have is why plone3 installlation does not set this variable on installation? So I set it and now have the following problem (note I slightly modified repozo.py to print our sys.path before importing.) C:\Program Files\Plone 3\Zope\binrepozo.py ['C:\\Program Files\\Plone 3\\Zope\\bin', 'c:\\Program Files\\Plone 3\\Zope\\lib \\python', 'C:\\WINNT\\system32\\python25.zip', 'c:\\Python25\\DLLs', 'c:\\Pytho n25\\lib', 'c:\\Python25\\lib\\plat-win', 'c:\\Python25\\lib\\lib-tk', 'C:\\Pyth on25', 'c:\\Python25\\lib\\site-packages', 'c:\\Python25\\lib\\site-packages\\wi n32', 'c:\\Python25\\lib\\site-packages\\win32\\lib', 'c:\\Python25\\lib\\site-p ackages\\Pythonwin'] Traceback (most recent call last): File C:\Program Files\Plone 3\Zope\bin\repozo.py, line 75, in module from ZODB.FileStorage import FileStorage File c:\Program Files\Plone 3\Zope\lib\python\ZODB\__init__.py, line 20, in module from persistent import TimeStamp File c:\Program Files\Plone 3\Zope\lib\python\persistent\__init__.py, line 1 9, in module from cPersistence import Persistent, GHOST, UPTODATE, CHANGED, STICKY ImportError: DLL load failed: The specified module could not be found. From the following, it's pretty clear that the cPersistence.pyd file is present. C:\Program Files\Plone 3\Zope\lib\python\persistentdir Volume in drive C has no label. Volume Serial Number is F07F-A1B8 Directory of C:\Program Files\Plone 3\Zope\lib\python\persistent 11/07/2007 10:26 AMDIR . 11/07/2007 10:26 AMDIR .. 08/17/2007 08:51 AM15,872 cPersistence.pyd 08/17/2007 08:51 AM12,288 cPickleCache.pyd 06/23/2007 02:06 AM 2,826 dict.py 08/23/2007 01:02 PM 2,559 dict.pyc 06/23/2007 02:06 AM10,556 interfaces.py 08/23/2007 01:02 PM10,685 interfaces.pyc 06/23/2007 02:06 AM 2,929 list.py 08/23/2007 01:02 PM 3,431 list.pyc 06/23/2007 02:06 AM 4,193 mapping.py 08/23/2007 01:02 PM 3,148 mapping.pyc 06/23/2007 02:06 AM 738 README.txt 08/23/2007 01:01 PMDIR tests 08/17/2007 08:51 AM 8,704 TimeStamp.pyd 06/23/2007 02:06 AM 8,258 wref.py 08/23/2007 01:02 PM 8,539 wref.pyc 06/23/2007 02:06 AM 1,211 __init__.py 11/07/2007 10:26 AM 793 __init__.pyc 16 File(s) 96,730 bytes 3 Dir(s) 8,482,267,136 bytes free Is there a 'cPersistence.dll' file that is supposed to be somewhere, and maybe I don't have that in my path? Thanks a lot. This is really frustrating. Jim ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] running Zope/Plone on a Windows Virtual Machine?
yes I realise about the single point of failure. Ideally of course we'd have separate physical servers for this. It's an intranet so security is less of an issue. There just seem to be advantages from running virtual machines. I'm not an expert but aren't they easier to manage, rollback and back-up? Possibly the best idea would be to have a dev and staging as virtual machines on one server and then the live instance on another. Interesting that a VM service would only require the RAM that Zope requires normally. You would naturally think that the VM service would take up quite a bit of RAM itself? On 11/7/07, knitti [EMAIL PROTECTED] wrote: On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote: ok, so you could have two virtual machines say development and also staging which sat alongside a live production 'non virtual' instance of Zope. This would all sit on the one physical machine. The dev and staging instances would be switched off and on as required. With enough RAM and CPU would this be a realistic set-up for a service? Yes. Here are the implications: - the hardware is your single point of complete failure - the whole machine would share its performance among native and virtual instances, so staging and development will have an impact on the production instance - if you production instance gets compromised, its not far for intruders to staging/development - the other way round (atack on zope instance, then attack on vm to reach the host) is pobably not very much harder why don't you just run 3 zope instances on the host? If its a pure zope application, then they won't interfere with each other. Although you can't upgrade zope idependently then, its in any case better resource-wise. --knitti -- michael ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: Zope Jobs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Von Lahndorff wrote: Anyone have any recommendations for a good place to post a Zope job? Its for a freelance, work from where ever gig. Thanks. Here is probably a good place, or zope-dev. Tres. - -- === Tres Seaver +1 540-429-0999 [EMAIL PROTECTED] Palladion Software Excellence by Designhttp://palladion.com -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMcbU+gerLs4ltQ4RAndjAKDYis35TfnMSZYBtIrwuiw7+Iv8pwCbB1Zl wM6DTW4N3dbfkhkeuwAL3bQ= =bW2l -END PGP SIGNATURE- ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] running Zope/Plone on a Windows Virtual Machine?
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote: Has anyone tried this or had any experience with this? We're using Enfold Server and for staging and development purposes instead of using separate machines we're thinking of setting up a 'virtual machines' on the same server. There appear to be many benefits. However knowing that Zope/Plone are RAM instensive this could be an issue. There is no issue in running Zope in Windows _or_ running Zope inside a VM. It does need the same amount of RAM as running it not inside a VM. Whether that counts as RAM intensive or not depends on what you do with it and whether you have a comparison to another application. VMs tend to have a bit lower performance per MHz, so if you can live with that (and have the RAM to feed the VM) go ahead. You can later decide to put it on a dedicated machine anyway. --knitti ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] running Zope/Plone on a Windows Virtual Machine?
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote: yes I realise about the single point of failure. Ideally of course we'd have separate physical servers for this. It's an intranet so security is less of an issue. There just seem to be advantages from running virtual machines. I'm not an expert but aren't they easier to manage, rollback and back-up? that depends entirely on your needs. Copying away the Zope tree and the instances' products and extensions every time you change something on it and copying away the Data.fs every x hours isn't exactly hard, is it? And it requires less space. Having a VM lying aroung just to copy-over and run is also handy, but you need more resources. You decide. Design your backup/restore process well, when you need it you probably won't have much time thinking about it. Interesting that a VM service would only require the RAM that Zope requires normally. You would naturally think that the VM service would take up quite a bit of RAM itself? I didn't say that. I just said, that respective to zope's RAM usage its irrelevant, whether it is inside a VM or not. Of course you need the RAM for the VM itself. --knitti ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Please help in selecting approach (zope2, 3, +grok, plone) for a new project
Hello, It's a good question. :) On Nov 7, 2007 7:51 AM, Chetan Kumar [EMAIL PROTECTED] wrote: I am to start working on a new web (site/application) project. Wanted to find out better route from among the available choices. In other words what are *you* using ? It depends on what I'm doing. If you need a full-featured CMS, use Silva or Plone or something like that, based no Zope 2 (with Zope 3 technologies). I use Grok for web applications. Now since I'm one of the originators of Grok that's not a big surprise. :) Many people use Plone as a foundation for their own web applications. That works if the web application can be fit into Plone; you'll get a UI to work with and a ton of features. It can also be frustrating and hard to maintain if the web application isn't much like Plone. In that case instead of trying to bend Plone to your will it might make sense to start with another framework. I have used zope 2 and plone in my past projects. The question arises now as we have new rewrite of zope with grok on the horizon and plone as always is there (with a new version). There is also new CMS based on zope (hivert announced recently on zope-dev). Exciting times, but a little confusion too. The site will tend towards social networking some time later as I see the requirements taking shape. At the moment it is about people joining a community website and exchanging information on a particular topic, reviewing items (articles, links, photos) added to the site. Since you're talking about a community website it sounds at least initially to me that Plone, or some other community-oriented CMS could be a good fit. Silva doesn't sound like a good fit as it doesn't focus on community features primarily. Meanwhile all these things do tend to converge. Zope 2 software like Plone is using Zope 3 technology. Grok and Zope 3 aren't far apart and we're doing our best to make Grok compatible with classic Zope 3 applications. I'm sure eventually Grok technology will make it into Zope 2. Regards, Martijn ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] running Zope/Plone on a Windows Virtual Machine?
Has anyone tried this or had any experience with this? We're using Enfold Server and for staging and development purposes instead of using separate machines we're thinking of setting up a 'virtual machines' on the same server. There appear to be many benefits. However knowing that Zope/Plone are RAM instensive this could be an issue. Thanks -- michael ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] running Zope/Plone on a Windows Virtual Machine?
ok, so you could have two virtual machines say development and also staging which sat alongside a live production 'non virtual' instance of Zope. This would all sit on the one physical machine. The dev and staging instances would be switched off and on as required. With enough RAM and CPU would this be a realistic set-up for a service? On 11/7/07, knitti [EMAIL PROTECTED] wrote: On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote: Has anyone tried this or had any experience with this? We're using Enfold Server and for staging and development purposes instead of using separate machines we're thinking of setting up a 'virtual machines' on the same server. There appear to be many benefits. However knowing that Zope/Plone are RAM instensive this could be an issue. There is no issue in running Zope in Windows _or_ running Zope inside a VM. It does need the same amount of RAM as running it not inside a VM. Whether that counts as RAM intensive or not depends on what you do with it and whether you have a comparison to another application. VMs tend to have a bit lower performance per MHz, so if you can live with that (and have the RAM to feed the VM) go ahead. You can later decide to put it on a dedicated machine anyway. --knitti -- michael ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] running Zope/Plone on a Windows Virtual Machine?
On 11/7/07, michael nt milne [EMAIL PROTECTED] wrote: ok, so you could have two virtual machines say development and also staging which sat alongside a live production 'non virtual' instance of Zope. This would all sit on the one physical machine. The dev and staging instances would be switched off and on as required. With enough RAM and CPU would this be a realistic set-up for a service? Yes. Here are the implications: - the hardware is your single point of complete failure - the whole machine would share its performance among native and virtual instances, so staging and development will have an impact on the production instance - if you production instance gets compromised, its not far for intruders to staging/development - the other way round (atack on zope instance, then attack on vm to reach the host) is pobably not very much harder why don't you just run 3 zope instances on the host? If its a pure zope application, then they won't interfere with each other. Although you can't upgrade zope idependently then, its in any case better resource-wise. --knitti ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] is it possible to bypass ZSQL methods and callstoredprocedures in sqlserver straight from ZPT?
You could also write a Product or External Method to access your databases directly, using something like: http://pymssql.sourceforge.net/ you should not do that, you would get into lots of problems with zope's transaction machinery. always go trough a zope connection. robert begin:vcard fn:Robert Rottermann n: Rottermann;Robert email;internet:[EMAIL PROTECTED] tel;work:++41 31 333 10 20 tel;fax:++41 31 333 10 23 tel;home:++41 31 333 36 03 x-mozilla-html:FALSE version:2.1 end:vcard ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope-DB] ImportError: libmysqlclient_r.so.15
Hello Zope-DB members I'm migrating my zope/python/mysql/... installation from RedHat 3 to RedHat 5 and I still have a little problem. If I just start python and enter import MySQLdb I get the following error: Python 2.3.6 (#1, Nov 7 2007, 17:02:40) [GCC 4.1.1 20070105 (Red Hat 4.1.1-52)] on linux2 Type help, copyright, credits or license for more information. import MySQLdb Traceback (most recent call last): File stdin, line 1, in ? File /scratch/local/app/python/current/lib/python2.3/site- packages/PIL/__init__.py, line 19, in ? File build/bdist.linux-i686/egg/_mysql.py, line 7, in ? File build/bdist.linux-i686/egg/_mysql.py, line 6, in __bootstrap__ ImportError: libmysqlclient_r.so.15: cannot open shared object file: No such file or directory If I do the same after setting the LD_LIBRARY_PATH to /usr/local/lib/ mysql, I did not get error messages anymore! Now the problem: I included the LD_LIBRARY_PATH to my startup-script zopectl (see below) but I still get the same error message in the event.log file: 2007-11-07T20:53:24 ERROR Zope Could not import Products.ZMySQLDA Traceback (most recent call last): File /scratch/local/app/zope/2.8.9.1-2.3.6/lib/python/OFS/ Application.py, line 695, in import_product product=__import__(pname, global_dict, global_dict, silly) File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ ZMySQLDA/__init__.py, line 91, in ? import DA File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ ZMySQLDA/DA.py, line 92, in ? from db import DB File /scratch/ZOPE/TEMPLATE_ZOPE-2.8.9.1_SILVA-1.5.10/Products/ ZMySQLDA/db.py, line 89, in ? import _mysql File build/bdist.linux-i686/egg/_mysql.py, line 7, in ? File build/bdist.linux-i686/egg/_mysql.py, line 6, in __bootstrap__ ImportError: libmysqlclient_r.so.15: cannot open shared object file: No such file or directory Any idea? My versions: Zope-2.8.9.1-final Python-2.3.6 MySQL-python-1.2.2 mysql-5.0.45 The zopectl file: #! /bin/bash PYTHON=/scratch/local/app/python/2.3.6/bin/python ZOPE_HOME=/scratch/local/app/zope/2.8.9.1-2.3.6 reldir=`dirname $0` INSTANCE_HOME=`cd $reldir/..; pwd` CONFIG_FILE=$INSTANCE_HOME/etc/zope.conf SOFTWARE_HOME=/scratch/local/app/zope/2.8.9.1-2.3.6/lib/python PYTHONPATH=$SOFTWARE_HOME export PYTHONPATH INSTANCE_HOME SOFTWARE_HOME export TEMP=/tmp export LD_LIBRARY_PATH=/usr/local/lib/mysql export PYTHON_EGG_CACHE=$INSTANCE_HOME/var/.python-eggs ZDCTL=$SOFTWARE_HOME/Zope2/Startup/zopectl.py exec $PYTHON $ZDCTL -C $CONFIG_FILE $@ Grazie, Michele -- ETH Zürich Michele Marcionelli IT Support Gruppe D-MATH HG G 18 Rämistrasse 101 CH–8092 Zürich [EMAIL PROTECTED] http://www.math.ethz.ch/~michele +41 44 632 6193 Telefon +41 44 632 1404 Fax ___ Zope-DB mailing list Zope-DB@zope.org http://mail.zope.org/mailman/listinfo/zope-db
Re: [Zope-DB] Automatic capture of user ids for auditing
Am 07.11.2007, 21:11 Uhr, schrieb Ken Winter [EMAIL PROTECTED]: Charlie, thanks for the encouraging response! Encouraging? Not sure if that's quite the right word! ;-) Just assuming you did have connections per user, how would you go about this? What you suggest (below) is definitely the way I'd like to do this. However, ZPsycopgDA and its communications with PostgreSQL are currently black boxes for me, so I think I need some help taking the next steps. A few hours of poking around have led me to the following fragmentary ideas. * I have found what may be a likely candidate for the code that could be customized: the method DB.query(self, query_string, max_rows=None, query_data=None) defined (on my Windows system) in C:\Program Files\Plone 2\Data\Products\ZPsycopgDA\db.py. Yep, that's the place. * One idea is to parse the query_string in DB.query and, if it contains an INSERT or UPDATE command, splice a clause to record the current user's id into it (e.g. put last_updated_by = request.AUTHENTICATED_USER into the SET clause of an UPDATE). Doing it this way should require nothing special on the PostgreSQL side, since the user identifier would come through as part of the INSERT or UPDATE statement. This is going to be your quickest way assuming you can write a good enough parser so you don't catch statements with INSERT or UPDATE as part of the parameters! Using the underlying .execute(SQLStatement, (paras,)) method on the cursor might be preferable and would be available from our mxODBC Zope DA but this is unfortunately not compatible with ZSQL methods which predate the Python DB-API. You might, however, be able to use a stored procedure on the database to execute the query as rendered by the ZSQL method with the user passed as a parameter to the stored procedure. Again the mxODBC Zope DA would give you access to the .callproc(). No idea whether you could write such a stored procedure but I don't see why not. * The idea of extending the DA pass the current ZOPE user seems cleaner. However, I don't know how to get the DA to pass an additional parameter, and I don't know how to get PostgreSQL to pick up the parameter so it can store it as required. In other words, I don't understand this API, and I don't know where it is documented. Zope doesn't support it and unfortunately relational databases aren't getting the attention they deserve in the Zope world at the moment. Charlie -- Charlie Clark eGenix.com Professional Python Services directly from the Source Python/Zope Consulting and Support ...http://www.egenix.com/ mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ mxODBC, mxDateTime, mxTextTools ...http://python.egenix.com/ Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 ___ Zope-DB mailing list Zope-DB@zope.org http://mail.zope.org/mailman/listinfo/zope-db
Re: [Zope-DB] ImportError: libmysqlclient_r.so.15
Am 07.11.2007, 21:31 Uhr, schrieb Michele Marcionelli [EMAIL PROTECTED]: If I do the same after setting the LD_LIBRARY_PATH to /usr/local/lib/mysql, I did not get error messages anymore! Now the problem: I included the LD_LIBRARY_PATH to my startup-script zopectl (see below) but I still get the same error message in the event.log file: Sounds like a permissions problem: the Zope user might not be allowed to access /usr/local/lib/mysql. Charlie -- Charlie Clark eGenix.com Professional Python Services directly from the Source Python/Zope Consulting and Support ...http://www.egenix.com/ mxODBC.Zope.Database.Adapter ... http://zope.egenix.com/ mxODBC, mxDateTime, mxTextTools ...http://python.egenix.com/ Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 ___ Zope-DB mailing list Zope-DB@zope.org http://mail.zope.org/mailman/listinfo/zope-db
Re: [Zope-DB] Automatic capture of user ids for auditing
* The idea of extending the DA pass the current ZOPE user seems cleaner. For me, changing DA seems to add 'audit' fields seems nasty. What if you will have one specific table that doesn't need audit fields (this may happen when you're using authentication sources that rely on DB and in many other cases). I think that much cleaner might be to create something like AuditEnabledZSQLMethods that will render to sql that contains necessary statements and use it instead of ZSQLMethods when necessary. Above assumes that you'll create a Zope Product that (possibly) inherits from ZSQLMethods. You may take a look at CCZSQLMethods as they are example of extending ZSQLMethods. -- Maciej Wisniowski ___ Zope-DB mailing list Zope-DB@zope.org http://mail.zope.org/mailman/listinfo/zope-db