Re: [Zope] Where oh where is Repozo
On Jan 16, 2006, at 22:52, Jonathan Cyr wrote: Does the Zope Wiki article on Repozo tell you where to find it, maybe I missed it. I actually looked for quite a while. Maybe it just needs to be a little clearer... or maybe I need a smack in the head. I didn't have much success anyway, I setup my Zope/ZEO setup using SuSE 9.0's onboard Python and PIL installs, which, at the time, seemed an easy way to reproduce a ZEO client machine over and over. Upon running repozo, it can't find the pieces of Zope/ZODB, it needs to run, and I get an immediate traceback refering to the import of ZODB. After trying to adjust the pythonpath (wouldn't stick), and trying to drop repozo in the right directory. I couldn't get it to work. And, frankly, with everything Zope/Python/PIL working fine, I didn't mess with it very hard, fearing breaking it. Using SuSE's YAST installed Python seems to be my mistake... but It made sense at the time, and the right versions and everything... and although it works, upgrading Zope and using repozo are major drawbacks. I'll have to build a new box, correctly, and migrate to it. In any case, thanks for your time, -Jon I had the same problem with repozo. I solved it by modifying the repozo.py file and adding sys.path.append( PATH/TO/ZOPE/lib/python ) right before the from ZODB.FileStorage ... line. It's not a beautiful fix, but it works. ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: Handling login failures
On Jan 13, 2006, at 00:24, Florent Guillaume wrote: Håkan Johansson wrote: I want to be able to block a user from logging in if he fails to give the right login/password three times in a row. You're aware that this allows anyone to trivially DoS your users, right? If you take the precaution of matching with the IP, it still will harm people logging in through corporate or ISP proxies. Which, admittedly, may not be a problem in an intranet setting. Florent This is not really a problem for us since we have a firewall that must be logged into first. Only customers to the system can actually access it. If I had a say in it, I would not implement a system like this at all, but our customer wants it. Thanks for the warning though. I hadn't thought about the DoS aspect. ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Re: Handling login failures
On Jan 13, 2006, at 00:32, Dennis Allison wrote: A more usual solution to this issue is to insert a delay after the third and subsequent failures. You, of course, need a policy for removing the delay (successful login or N minutes following the last attempt). Yes, I have been thinking the same thing. It would be much less work for the admin of the system. Thanks for the tip though :) ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Handling login failures
Hi everyone. I want to be able to block a user from logging in if he fails to give the right login/password three times in a row. The problem is that I don't know how to do this. First, I need to know if an attempt failed. This, I have no idea how to do. Second, I need to block the user without deleting him. One problem here is that the user can write different login names for the different login attempts. We have been thinking about blocking the offender's IP for 30 minutes or so and leave it at that. It seems to me that SiteAccess.AccessRule could be used for that, but I haven't looked much into it yet. The documentation is extremely light. I have a very clean Zope 2.8.4 installation on a SuSE linux machine. Logins are handled in the standard Zope way, nothing special added. The Zope is running as a stand alone server, i.e. no Apache at all. Another thing: How do I get Zope to log failed authentication attempts? Neither event.log or Z2.log shows anything. As Z2.log is the access log, I would have guessed that such things should be logged there. If not, where and how? ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] [Solved] Zope/Editor problems
OK, use bin/runzope or zopectl fg, and you will surely get the error message. I'm a bit surprised it doens't end up in the logs as well, but maybe that's expected. I found out why it wouldn't work and I feel ashamed of myself. The trick with 'zopectl fg' showed me the errors of my way. I am running Zope as the user 'zope' but forgot to chown the installed products after installing them. Thanks for your help. ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope/Editor problems
You don't give enough informations (logs, tracebacks etc) for us to help you. The problem is that nothing is written in the logs. In the Epoz case, Zope just crashes during startup. And in the Kupu case I get the errors when I click on any of the tabs in the editor object. I have installed a new 2.8.3 instance and installed Epoz 2.0.1 in that. Zope still crashes without any logs or traces (I put both on them on 'all' for this). ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope/Editor problems
On Oct 26, 2005, at 13:31, Lennart Regebro wrote: On 10/26/05, Håkan Johansson [EMAIL PROTECTED] wrote: You don't give enough informations (logs, tracebacks etc) for us to help you. The problem is that nothing is written in the logs. In the Epoz case, Zope just crashes during startup. It crashes, without any error messages? Really? Have you turned on debug mode? Yes, debug mode is on. My personal guess is that both Epoz and Kupu has hidden prereqs that the documentation does not say, or that I simply missed somehow. With my old installation that has Plone installed (but not used), Zope can start with Kupu installed, but the bare bones installation crashes during startup if that is installed. My $INSTANCE_HOME/Products dir contains the following (before trying with editors): * LocalFS * TextIndexNG2 * README.txt ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope/Editor problems
On Oct 26, 2005, at 17:00, Lennart Regebro wrote: On 10/26/05, Håkan Johansson [EMAIL PROTECTED] wrote: My personal guess is that both Epoz and Kupu has hidden prereqs that the documentation does not say, or that I simply missed somehow. You should still get an error message. Do you start the server with bin/runzope or bin/zopectl start? zopectl start ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
