Re: [Zope] Problem with ZSQLMethods/MySQL after update
Thanks a lot for your help, Dieter, Greg, and Andy! Dieter, you were absolutely right about the broken instances. All I had to do was delete ZSQLMethods from my Products folder and restart Zope. Everything was all right after that. Andy and Greg, so far I did not have any problems using mysqlpython 1.2.0 with ZMySQLDA 2.0.8. But since Andy is the expert I now installed 2.0.9b3 and am happy with it. :-) Cheers and thanks again, Ragnar On Tue, 28 Jun 2005 19:43:15 +0200 Dieter Maurer <[EMAIL PROTECTED]> wrote: > Ragnar Beer wrote at 2005-6-27 18:50 +0200: > >After upgrading Zope from version 2.6.4 to 2.8.0 and mysqlpython from > >0.9.2 to 1.2.0 I cannot add or edit ZSQLMethods anymore, although there > >is an open(MySQL)db-Connection that works just fine with the same > >ZSQLMethods that cannot be edited or with external methods. The error > >I'm getting is: > > > >"There are no SQL database connections. You need to add a Zope SQL > >database connection before you can edit a Zope SQL Method." > > Almost surely, your "ZMySQLDA" instances are broken (and then > do not behave as "SQL database connection" instances). > > Check your Zope logfile for messages of the form > "could not install product...". > > -- > Dieter > ___ > Zope maillist - Zope@zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
[Zope] Problem with ZSQLMethods/MySQL after update
Hi everybody! After upgrading Zope from version 2.6.4 to 2.8.0 and mysqlpython from 0.9.2 to 1.2.0 I cannot add or edit ZSQLMethods anymore, although there is an open (MySQL)db-Connection that works just fine with the same ZSQLMethods that cannot be edited or with external methods. The error I'm getting is: "There are no SQL database connections. You need to add a Zope SQL database connection before you can edit a Zope SQL Method." This happens only when using my old zope instance (which I need to) but not when using a freshly created zope instance. Is this a known problem? I couldn't find anything in my zope mailing list archive. Cheers, Ragnar P.S.: Here are the contents of my ProductManagement screen: BTreeFolder2 (Installed product BTreeFolder2 (BTreeFolder2-1.0.1)) 2005-06-20 10:35 DocFinderEverywhere (Installed product DocFinderEverywhere (DocFinderEverywhere-0.4.1)) 2003-02-14 08:39 ExternalMethod (Installed product ExternalMethod (External Method-1-0-0)) 2000-10-12 15:51 Five (Installed product Five (Five 1.0.1)) 2005-06-20 10:35 MIMETools (Installed product MIMETools) 2001-01-05 14:31 MailHost (Installed product MailHost (MailHost-1-3-0)) 2003-05-11 23:00 OFSP (Installed product OFSP (OFSP-1-0-0)) 2000-10-12 15:51 PageTemplates (Installed product PageTemplates (PageTemplates-1-4-0)) 2002-05-07 13:53 PluginIndexes (Installed product PluginIndexes) 2001-09-04 13:29 PythonScripts (Installed product PythonScripts (PythonScripts-2-0-0)) 2001-09-04 10:13 Sessions (Installed product Sessions) 2002-05-07 13:53 SiteAccess (Installed product SiteAccess (SiteAccess-2-0-0)) 2001-09-04 11:38 SiteErrorLog (Installed product SiteErrorLog) 2003-02-14 08:39 StandardCacheManagers (Installed product StandardCacheManagers (StandardCacheManagers-1-1-0)) 2001-09-04 10:13 TemporaryFolder (Installed product TemporaryFolder) 2002-05-07 13:53 Transience (Installed product Transience) 2002-05-07 13:53 ZCTextIndex (Installed product ZCTextIndex) 2003-02-14 08:39 ZCatalog (Installed product ZCatalog (ZCatalog-2-2-0)) 2000-10-12 15:51 ZGadflyDA (Installed product ZGadflyDA) 2001-01-05 14:31 ZMySQLDA (Installed product ZMySQLDA (ZMySQLDA 2.0.8)) 2003-11-30 20:17 ZODBMountPoint (Installed product ZODBMountPoint) 2005-06-20 10:36 ZReST (Installed product ZReST (1.1)) 2005-06-20 10:36 ZSQLMethods (Installed product ZSQLMethods) 2000-10-12 15:51 ZopeTutorial (Installed product ZopeTutorial (Zope Tutorial 1.2)) 2005-06-20 10:36 ___ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD 2.8 problem solved
I understood that the workaround he suggested also works with -current. I submitted the bug a couple of days ago. The ID is 1631 if you want to search for it. Ragnar >Ragnar Beer wrote: > >> Did you understand form Jason Ish's message that it should be working >> with -current or did you compile and test it yourself? I compiled >> -current last week and it didn't work and there have been no changes >> to the source since then. > >I just took his word for it: > >> - python on this system uses /usr/lib/libc_r.so.3.3 > >> hmm, freaky.. works fine on my -current system.. I remember it being a >> bitch with Zope 2.2.4. well, the management interface works just fine >> where it was dying before. > >So if it doesn't work, somebody should notify the OpenBSD people. I >assume other Python applications than Zope have problems with this? > > >Alexander Limi. ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: [Zope-dev] Poor programming practice?
What's the go4 book? Ragnar >yes I have the go4 book and I fully agree that one or other of the above >patterns would be feasible. The problem is that the base medusa comes >from Sam Rushing and Zope makes use of it. I guess since I already patch >the Zope code I could just extend the patch, but the best solution would >come from having two main players agree on such stuff. >-- >Robin Becker ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD 2.8 problem solved
>Start Zope, and you will find that it works fine now. Zope also works fine >in the CURRENT tree of OpenBSD, so presumably it will work out-of-the-box on >OpenBSD 2.9. This is the safest way of getting it to work at the moment. Did you understand form Jason Ish's message that it should be working with -current or did you compile and test it yourself? I compiled -current last week and it didn't work and there have been no changes to the source since then. Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] RESPONSE.redirect
It's a html meta-tag that does the trick, not http. Look at http://www.geocities.com/siliconvalley/campus/1924/metacom.html. HTH Ragnar >Hi all, > >I'd like to show a page and after a few seconds I'd like to redirect to >another page. If I simply add it is >done immediately. How can I achieve a delay of a couple of seconds? > >Oliver ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Editors [OT]
What's speedbar mode? >XEmacs (speedbar mode) > >> Any ideas? > >I had to, love makes you do strange things. Oh, yes indeed ;) Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Buffer overflow in MySQL < 3.23.31
Howdy!
Just for us MySQL users I'm forwarding this from bugtraq.
Ragnar
>Hi,
>
>all versions of MySQL < 3.23.31 have a buffer-overflow which crashs the
>server and which seems to be exploitable (ie. 4141414 in eip)
>
>Problem :
>An attacker could gain mysqld privileges (gaining access to all the
>databases)
>
>Requirements :
>You need a valid login/password to exploit this
>
>Solution :
>Upgrade to 3.23.31
>
>Proof-of-concept code :
>None
>
>Credits :
>I'm not the discoverer of this bug
>The first public report was made by [EMAIL PROTECTED] via the MySQL
>mailing-list
>See the following mails for details
>
>Regards,
>Nicob
>
>Here the original post to the MySQL mailing-list :
>==
>
>On Jan 12, Jo?o Gouveia wrote:
>> Hi,
>>
>> I believe i've found a problem in MySql. Here are some test's i've made in
>> 3.22.27 x86( also tested on v3.22.32 - latest stable, although i didn't
>> debug it, just tested to see if crashes ).Confirmed up to latest 3.23
>
>> On one terminal:
>>
>> spike:/var/mysql # /sbin/init.d/mysql start
>> Starting service MySQL.
>> Starting mysqld daemon with databases from /var/mysql
>> done
>> spike:/var/mysql #
>>
>>
>> On the other terminal:
>>
>> jroberto@spike:~ > mysql -p -e 'select a.'`perl -e'printf("A"x130)'`'.b'
>> Enter password:
>> (hanged..^C)
>>
>>
>> On the first terminal i got:
>>
>> spike:/var/mysql # /usr/bin/safe_mysqld: line 149: 15557 Segmentation fault
>> nohup
>> $ledir/mysqld --basedir=$MY_BASEDIR_VERSION --datadir=$DATADIR --skip-lockin
>> g "$@" >>$err_log 2>&1>
>> Number of processes running now: 0
>> mysqld restarted on Fri Jan 12 07:10:54 WET 2001
>> mysqld daemon ended
>>
>>
>> gdb shows the following:
>>
>> (gdb) run
>> Starting program: /usr/sbin/mysqld
>> [New Thread 16897 (manager thread)]
>> [New Thread 16891 (initial thread)]
>> [New Thread 16898]
>> /usr/sbin/mysqld: ready for connections
>> [New Thread 16916]
>> [Switching to Thread 16916]
>>
>> Program received signal SIGSEGV, Segmentation fault.
>> 0x41414141 in ?? ()
>> (gdb) info all-registers
>> eax0x1 1
>> ecx0x68 104
>> edx0x8166947135686471
>> ebx0x41414141 1094795585
>> esp0xbf5ff408 0xbf5ff408
>> ebp0x41414141 0x41414141
>> esi0x41414141 1094795585
>> edi0x0 0
>> eip0x41414141 0x41414141
>> eflags 0x10246 66118
>> cs 0x23 35
>> ss 0x2b 43
>> ds 0x2b 43
>> es 0x2b 43
>> fs 0x0 0
>> gs 0x0 0
>> (gdb)
>>
>>
>> looks like a tipical overflow to me.
>> Please reply asap, at least to tell me i'me not seeing things. :-)>
>> Best regards,
>>
>> Joao Gouveia aka Tharbad.
>>
>> [EMAIL PROTECTED]
>
>Here the reponse to a email I send today to the MySQL list :
>
>
>Sergei Golubchik (MySQL team) wrote :
>>
>> Hi!
>>
>> On Jan 18, Nicolas GREGOIRE wrote:
>> > Hi,
>> >
>> > Still not any info about the buffer-overflow discovered last week ?
>> > Shouldn't be fixed at the beginning of the week ?
>> >
>> > Please, dear MySQL team, give us info !!
>> >
>> > Regards,
>> > Nicob
>>
>> Fixed in latest release (3.23.31).
>>
>> Regards,
>> Sergei
>
>Here an part of the 3.23.30 to 3.23.31 diff :
>=
>
>+Changes in release 3.23.31
>+--
>+
>+ * Fixed security bug in something (please upgrade if you are using a
>+ earlier MySQL 3.23 version).
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Tools used for programming Zope
Can Dreamweaver also use the https protocol for WebDAVing? Ragnar >Apart from that, look at using an FTP or WebDAV enabled editor like >DreamWeaver. >It works now, but support is supposed to be getting better in Zope 2.3 > >cheers, > >Chris ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Zope and Linux flavors
Howdy Zopistas! These days I came to the conclusion that I might need to investigate a bit on Linux as an alternative base for running Zope. So far I've been using OpenBSD which is a real timesaver when it comes to setting up a secure server which is my first priority over anything else. What I'd like to know is: Which Linux distributions are you using for running Zope and how easy it was for you to maximize security of your server? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: Zope and OpenBSD 2.8 news?
I just asked the question on the OBSD misc list. If OBSD's threads lib is the problem then we need to create some traffic *there* to be heard and not here on the Zope list. So please join the thread on misc and we might get a fix sooner. Ragnar >There are many people who would like to be able to run threaded apps >period ... d@ is the maintainer of the threads library and AFAIK he's >looking into fixing these issues but there is no ETA for patch(s). > >// Brad > >[EMAIL PROTECTED] >[EMAIL PROTECTED] > >>Are there any plans for patches that fixes this to come out? >> >>There are many ppl out there that are ancious to run Zope on OBSD 2.8! >> >> >>-Diego >> >>On Monday 15 January 2001 02:04 pm, Brad wrote: >>> Unfortunately, it's true. Changes were made to allow some other archs >>> (sparc, powerpc) to work quite a bit more than they did before but this >>> also brought a few stability issues into the fold on i386 ... 2.7's >>> threads were problematic too under certain conditions ... just you havent >>> run into any so far. >>> >>> // Brad >>> >>> [EMAIL PROTECTED] >>> [EMAIL PROTECTED] >>> >>> >Are there any news about Zope running on OBSD 2.8? >>> > >>> >Some ppl in the Zope mailling list says that OBSD 2.8 has a buggy threads > >> >libs since 2.7 and previous works fine, is that true? > >> > > >> >thanks... ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] OpenBSD 2.8 woes
Whereas I couldn't reproduce the error in a prior thread this time I can. On my OBSD 2.8 machine running python 1.52 -with-thread CPU load goes up to 99% when I try to access the management screens. There was a discussion on the OBSD ports list to create a 1.52 port. Did you check whether there is and whether that's solving the problem? Ragnar >Hello, > > >> > Could anybody enlighten me??? I don't know Python (yet), so the >> > tracebacks are not too informative for me ... >> >> Are you using Python 2.0? It's not yet compatible with Zope, though >> efforts are being made. Just enter "python" to find out. > > >No, I'm not. At first I tried to take the version that comes >shipped as a package with OpenBSD 2.8, which is 1.6 with tk and >threads compiled in (at least that's what the package name >suggests). >When that didn't work, I pkg_deleted the package and then >downloaded the 1.52 as noted in the Zope specs, compiled and >installed it - it seemed to run, but Zope cr***ed out with a >python.core after trying to access the management screen. The >machine itself definitely is okay, techwise. The python >compilation and installation didn't show any errors. The OpenBSD >installation is totally virgin otherwise. > >I don't really know what else I could do. Right now it looks >pretty much as if I'm going to switch to FreeBSD, my second >favourite :-| >Has anyone got Zope 2.2.5 running under OpenBSD 2.8??? If so, I'd >be really curious what steps you followed to get it to work.- > >Cheers, Jan >-- >Radio HUNDERT,6 Medien GmbH Berlin >- EDV - >[EMAIL PROTECTED] > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] OpenBSD 2.8 woes
Seems you already found out what's wrong. Why didn't you post anything on the OBSD misc list so that they can fix it? Ragnar >Hello Jan: > >>I don't really know what else I could do. Right now it looks >>pretty much as if I'm going to switch to FreeBSD, my second >>favourite :-| Has anyone got Zope 2.2.5 running under OpenBSD >>2.8??? If so, I'd >>be really curious what steps you followed to get it to work.- > >You will have to use FreeBSD or use OpenBSD 2.7. > >2.8 will not work because there is a bug in the threading library >included with OpenBSD 2.8. Zope triggers it when you call the >management screen. > >However, in the Zope code for the management screens there are >"thread-safe" calls used which are not, as far as I know, used >elsewhere in Zope. Maybe there is a bug in that code? > >But for now I believe the bug to be in OpenBSD 2.8. I have not found >anything to suggest that it has been fixed or looked at. None of the >patches released so far for 2.8 mention it. > >I went through this in early December. > >Luke > > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - http://lists.zope.org/mailman/listinfo/zope-announce >http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] cross-reference tool
Hi Zopistas! The more variables I have in my external methods the greater the danger becomes that a typo slips through my alert eyes ;) and the more I wish I had a cross reference tool to check variable occurences. Is there such a tool for python? (I've never heard of one.) What are you using for debugging Zope stuff? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] Caching/http-acceleration and proxying Zope-served content
I started using mod_proxy, because I needed the configuration options (redirection etc.) and squid wouldn't cache ssl stuff. It's running very well since about six months now. The downside is that it's really badly documented. BTW there is a new book by Ralf Engelschall that you can download for free from http://www.apacheref.com that also covers mod_proxy. Not in detail though. He calls mod_proxy apache's stepchild. Concerning numbers I gave some in my caching with mod_proxy howto (http://www.zope.org/Members/rbeer/caching). Ragnar >Hmm. That's been my thought on squid as well, given its ground-up design >for caching in the first place. My worry, though, is that with squid I lose >support for virtual hosts on seperate boxes, because I need to support Zope, >static content, and some legacy stuff running ColdFusion on an NT box. My >impression is that Squid's http accelerator mode (inverse transparent proxy, >or whatever you want to call it) is somewhat of an afterthought compared to >the standard proxy use case. If it supports the ability to direct traffic >based upon the virtual host address, then squid works - if not, I think I >have to go the Apache route... I also wonder just how good Apache's >mod_proxy caching is? Any thoughts? > >Sean > >-Original Message- >From: Shane Hathaway [mailto:[EMAIL PROTECTED]] >Sent: Monday, January 08, 2001 12:59 PM >To: [EMAIL PROTECTED] >Subject: Re: [Zope] Caching/http-acceleration and proxying Zope-served >content > > >[EMAIL PROTECTED] wrote: >> >> I have a question, for anyone experienced in working with Zope and caching >> proxies: >> >> I'm setting up a load-balanced server farm that has nodes that will run >> Apache and proxy (via mod_proxy) to ZEO clients running ZServer. This >farm >> is routed (both ways) through a layer 4 load-balancing appliance, and all >> these boxes (both nodes and the balancer) are sitting inside a DMZ with >> private IP addresses. The public world will access these servers via a >> firewall box running transparent proxy (actually, I guess, similar to >> squid's http_accel mode; the semantics here are a bit tricky, as it's more >> of a inverse trans-proxy). Between Apache and Zope, there would be >several >> virtual hosts, and I'd be using the SiteAccess product. It gets a bit >> tricky in that I need to access several different virtual hosts inside the >> DMZ (one for the ZEO farm, and another for a dedicated CGI-based ad server >> on another box) via the proxy. A more detailed (ascii art) diagram of >what >> I am trying to do, is at http://209.132.8.98/server_ascii_art.txt >> >> My question is this: does anybody have any thoughts on the merits of Squid >> (http accelerator mode) versus Apache/mod_proxy in terms of caching, >virtual >> hosts, and the like when working with Zope sites? Any big pitfalls to >this >> kind of setup with Zope sites? > >I would prefer Squid since its only purpose in life is caching. It >follows the "do one thing and do it well" mantra. > >But whatever your choice, I hope you make use of the new CacheManagement >feature in Zope 2.3. It is designed to make things like this >straightforward and easy. There's a recent news announcement that links >to everything you need--including complete help docs! > >Shane > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Adding many users
Howdy Zopistas and happy new year! I need to add about 150 users to an acl_users folder and I wouldn't like to do it manually since the data already exists in a python list. What would be an elegant way to add them all with a python script? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Re: running zope with OpenBSD 2.8 i386
I still got it under construction. Zope shouldn't work with Python 1.6 so I removed the package and downloaded the python 1.5.2 sources you ./configure --with-thread to have threads enabled and that's it. Runs beautifully but I didn't have time to install Zope so far. It's running very well under OBSD 2.7 but that version has a python 1.5.2 package. Viel Spass! Ragnar >hi .. > >I want to switch my webserver from linux 2.2.15 to OpenBSD 2.8. On the >linux machine I am running the zope webserver. >I tried to let it run with my OpenBSD home-installation, but it doesn't >work. It compiles slightly and starts up. When I connect to it it asks >me for the superuser account. Then I try to login but I get a lot of >error messages (python related, so maybe the port "python-1.6-threads" >is buggy?). > >My question is: Did someone of you got zope running with obsd 2.8? The >documentation of zope says it runs in any case with 2.7 and python 1.6 >... > >(I tried the above on 2 machines, both obsd 2.8, both the same errors) > > >thanks for reading ... > >MfG >-- >Rene Lange ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Squishdot with access restrictions
Howdy Zopistas! Has anyone installed a Squishdot site with access restrictions? I've got the problem that as soon as I take away the "view" and "access contents information" permission from the anonymous user in my Squishdot site I cannot use the search interface anymore but only get KeyErrors (icon or thread_path depending on which permission I take away). I'm using Squishdot 0.7.2 and Zope 2.2.2. Any help appreciated! Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Indirect addressing
Howdy Zopistas! I have a directory structure like this: + myfolder index_html my_external_method dtml_method_1 dtml_method_2 ... In index_html I want to include either dtml_method_1 or dtml_method_2, ... (one method for every week of year). my_external_method tells me which dtml_method to include. This would logically be handled with ">" in index_html but this doesn't work. How could I get this working? Any ideas? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] [ot] python book
I read Learning Python and still love it and would highly recommend it. The book is very good! Apart from that I'm using the Python Essential Reference more often nowadays. It's handier than a printout of the lib.pdf but actually you don't really need if if you are comfy with the pdf stuff. What I'm still missing is something like the perl cookbook but for Python :( Ragnar >Hi, > >I'm going through the tutorials available on Python.org but can anyone >recommend a good book? > >I've always been impressed by O'Reilly's books and I see that there are >a number of them available: > >- Python Programming on Win32 >- Learning Python >- Programming Python > >Which one of the above (or indeed, any others) would be best for me? >Me? I've got some C experience and will be using Python with Zope to >create a portal, & some simple apps. > >Any advice would be greatly appreciated. > >- Best regards, >Lee > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] login dialog text
Thanks a lot! Do you know whether it's also possible to set a folder based variable within Zope to allow for different messages when logging into different folders? Ragnar >On Thu, 30 Nov 2000, Ragnar Beer wrote: > >> Hi Zopistas! >> >> When users connect to a restricted area a dialog box pops up that >> looks more or less like this: >> >> >> Enter user name for Zope at myhost: >> User: _ >> Password: _ >> >> >> Where and how can I change the content of the first line so that it >> would e.g. read "Enter user name for funky stuff at myhost"? > >you can put the following in your start script somewhere before the exec > >Z_REALM='my funky stuff' >export Z_REALM > >HTH, >Stefan ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] login dialog text
Hi Zopistas! When users connect to a restricted area a dialog box pops up that looks more or less like this: Enter user name for Zope at myhost: User: _ Password: _ Where and how can I change the content of the first line so that it would e.g. read "Enter user name for funky stuff at myhost"? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] IIS and Zope share same problem :-S
As I already suggested ages ;) ago (and still didn't put into practice) it would here again be best to deny everything that isn't explicitly allowed (e.g. allow whatever ends with _html or .html and deny everything else) but then I would have to go over the whole website and make bazillions of changes ... I fixed the problem temporarily by adding some "FilesMatch/LocationMatch + deny from all" in my httpd.conf. But what else do I have to deny apart from objectIds? Ragnar >Andrew Kenneth Milton wrote: >> >> | >> | http://www.zope.org/standard_html_header for example ;-) >> >> Not that old chestnut again... > >Yes, that old chestnut again. If it's considered a serious security flaw >by Microsoft, maybe the Zope community should finally do something to >solve it. > >...and yes, there are discussions about this on Zope-dev right now, >which will hopefully produce a solution :-) > >cheers, > >Chris > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] ZMySQL and MySQLdb Versions
Howdy! When I go to the download section on zope.org looking for a way to connect Zope and MySQL I can find the following: - Zope MySQL Database Adapter, 2000/07/20 by mordred (ZMySQLDA-1.2.0.tar.gz) - ZMySQLDA, 2000/07/20 by MikeP (ZMySQLDA-1.1.3-nonbin.tar.gz) - An Interface for MySQL, 2000/07/20 by adustman (MySQLdb-0.1.2.tar.gz) Now how should anybody new to Zope know what to use? Especially when ZMySQLDA goes up to at least version 2.0.0 (I tried to look it up but couldn't connect to starship.python.net) and MySQLdb at least to version 0.2.1. I'm still using ZMySQLDA 1.1.3 with MySQLdb 0.1.3 which can't be found in the download section. Confusing, isn't it? What could we possibly do about it? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Migrating from 2.1.6 to 2.2.2
Take a look at http://www.zope.org/Products/Zope/2.2.0/upgrading_to_220. Ragnar >I have a Zope based web site running under 2.1.6. I want to move it >to a different machine which will be running 2.2.2. Can someone >identify the steps I need to take to make this move? What things do >I need to be aware of in moving between these versions? Do I just >need to copy the data.fs along with any required product files, or >do I need move/configure other things. > >Thanks. > > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - http://lists.zope.org/mailman/listinfo/zope-announce >http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] acl_users mystery
Howdy! I had a strange problem today: I added a Role "User" in the root's security tab and gave it a couple of permissions. But further down the tree in /de/support where in the acl_users folder I added a user with the role 'User' the permissions where not acquired (until set manually in the /de/support security tab I couldn't log in) although 'Acquire permission settings' was turned on all the way down the tree. Very mysterious. Did I misunderstand the whole idea or is there something wrong? (Zope 2.1.6) Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Caching How-To (was Cache concerns (waszope/proxy_pass configuration problem) configuration problem)
Cool! I took a quick look at it and I think they fit together quiete nicely. In your howto you wrote "Some people have reported success with Apache using ProxyPass". This is exactly what my howto is about. Perhaps you could set a link? Ragnar >On Fri, 4 Aug 2000 12:33:53 +0200, Ragnar Beer ><[EMAIL PROTECTED]> wrote: > >>During the last couple of days I could finally figure out how to set >>up caching with mod_proxy. This morning I put together a caching >>howto and submitted it for review. >> >>If it's accepted it will be available under >>http://www.zope.org/Members/rbeer/caching > >Hey really? Me too. > > http://www.zope.org/Members/htrd/howto/caching > > > >Toby Dickenson >[EMAIL PROTECTED] ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Caching How-To (was Cache concerns (was zope/proxy_passconfiguration problem)configuration problem)
During the last couple of days I could finally figure out how to set
up caching with mod_proxy. This morning I put together a caching
howto and submitted it for review.
If it's accepted it will be available under
http://www.zope.org/Members/rbeer/caching
I'm going on holiday now (Crete: wonderful greek island) and I'm
going without my laptop so I won't answer any emails for the next two
weeks ;)
Ragnar
>Ragnar,
>
>Caching is a subject I'm not all that familiar with but one I need to learn
>really fast. My site is about to go live, and I have a monster of a query
>that will bring my system to its knees if 100 students run it at a time. So
>I'm sending this off to the Zope mailing list wondering if anyone can give
>us some caching/performance tips.
>
>- T.J.
>
>-Original Message-
>From: Ragnar Beer [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, August 02, 2000 12:48 PM
>To: T.J. Mannos
>Subject: RE: [Zope] zope/proxy_pass configuration problem
>
>
>Very good idea! I tried it and it works like a charm :) Thanks a lot!
>
>One problem is left over: apache doesn't cache the documents although I have
>
>_.DateTime(_.DateTime().timeTime() + 3600).toZone('GMT').rfc822())">
>
>in my standard_html_header. ab -n 100 -c 1
>http://www.dummy.com/index_html shows 100 queries in Z2.log where
>there should be only one.
>What could I be doing wrong?
>
>Ragnar
>
>>Ragnar,
>>
>>If you're referring to my ZServer+Apache+SSL HOWTO, this would be a
>problem.
>>Going in through https will only give you access to the 'ssl' directory.
>>The quick & dirty solution (while retaining the ability to distinguish
>>between http and https) is to reverse the setup, i.e. place the https
>>SiteRoot in the main folder and create a separate folder called, say,
>>'http', which holds the http SiteRoot. This solution will kill two birds
>>with one stone: it will grant access to the entire site via https while
>>restricting http users to an empty subdirectory.
>>
>>Hope this helps,
>>T.J.
>>
>>-Original Message-
>>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
>>Ragnar Beer
>>Sent: Wednesday, August 02, 2000 1:30 AM
>>To: [EMAIL PROTECTED]
>>Subject: [Zope] zope/proxy_pass configuration problem
>>
>>
>>Hi Zope-Configuristas!
>>
>>I would finally like to say goodbye to pcgi but one thing keeps me
>>hooked. I tried and tried but the solution just won't appear. Here is
>>the problem:
>>
>>I have a site that is supposed to be reachable via http as well as
>>via https. That's not a problem per se. Configuration of zope with
>>proxy_pass is easy as can be. The problem is that management shall be
>>possible via https _only_ (for obvious reasons). But as soon as I use
>>site access to define the http-branch this branch is not
>>managable/accessable via https any more. Is there a solution?
> >
> >Ragnar
> >
> >___
> >Zope maillist - [EMAIL PROTECTED]
> >http://lists.zope.org/mailman/listinfo/zope
> >** No cross posts or HTML encoding! **
>>(Related lists -
>> http://lists.zope.org/mailman/listinfo/zope-announce
>> http://lists.zope.org/mailman/listinfo/zope-dev )
>
>
>___
>Zope maillist - [EMAIL PROTECTED]
>http://lists.zope.org/mailman/listinfo/zope
>** No cross posts or HTML encoding! **
>(Related lists -
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] tree plus/minus url
I found quite an easy solution for Zope 2.1.6:
In lib/python/TreeDisplay/TreeTag.py you have to replace the "old
code" with the "new code". (Blame me - I forgot to make a copy
beforehands which keeps me from using diff.)
The idea is to "export" the piece of code that puts together the url
to treeData['tree-item-clickurl'] so that you can access it with
within your tree-tag. I haven't checked
this for unwanted side effects. Perhaps someone more familiar with
the zope code could do that? For me it works fine!
Ragnar
Line 372:
# Mostly inline encode_seq for speed
s=compress(str(diff))
if len(s) > 57: s=encode_str(s)
else:
s=b2a_base64(s)[:-1]
l=find(s,'=')
if l >= 0: s=s[:l]
s=translate(s, tplus)
script=md['SCRIPT_NAME']
# old code
#if exp:
#treeData['tree-item-expanded']=1
#output(''
# '' %
# (id, root_url, s, id, script))
#else:
#output(''
# '' %
# (id, root_url, s, id, script))
# end of old code
# New code
if exp:
treeData['tree-item-clickurl']= '%s?tree-c=%s#%s' %
(root_url, s, id)
treeData['tree-item-expanded']=1
output(''
'' %
(id, treeData['tree-item-clickurl'], script))
else:
treeData['tree-item-clickurl']= '%s?tree-e=%s#%s' %
(root_url, s, id)
output(''
'' %
(id, treeData['tree-item-clickurl'], script))
# end of new code
output('\n')
else:
if level > 2: output(_td_colspan % level)
elif level > 0: output(_td_single * level)
output(_td_single)
output('\n')
>Ragnar Beer wrote:
>>
>> Howdy!
>>
>> I've been experimenting with trees for a while and discovered that
>> almost all innocent first time clickers were clicking on the text
>> _behind_ the plus and minus images instead on the images themselves.
>> So I decided to make the text a link with the same url as the image
>> has but I can't find the right variable. Where is that url stored?
>> Can anybody help?
>
>Your best bet is to look in the source for the tree tag and see how it's
>done there:
>/lib/python/TreeDisplay/TreeTag.py
>
>cheers,
>
>Chris
>
>PS: Please post back to the list if you find out how ;-)
>
>___
>Zope maillist - [EMAIL PROTECTED]
>http://lists.zope.org/mailman/listinfo/zope
>** No cross posts or HTML encoding! **
>(Related lists -
> http://lists.zope.org/mailman/listinfo/zope-announce
> http://lists.zope.org/mailman/listinfo/zope-dev )
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
RE: [Zope] zope/proxy_pass configuration problem
Very good idea! I tried it and it works like a charm :) Thanks a lot! One problem is left over: apache doesn't cache the documents although I have in my standard_html_header. ab -n 100 -c 1 http://www.dummy.com/index_html shows 100 queries in Z2.log where there should be only one. What could I be doing wrong? Ragnar >Ragnar, > >If you're referring to my ZServer+Apache+SSL HOWTO, this would be a problem. >Going in through https will only give you access to the 'ssl' directory. >The quick & dirty solution (while retaining the ability to distinguish >between http and https) is to reverse the setup, i.e. place the https >SiteRoot in the main folder and create a separate folder called, say, >'http', which holds the http SiteRoot. This solution will kill two birds >with one stone: it will grant access to the entire site via https while >restricting http users to an empty subdirectory. > >Hope this helps, >T.J. > >-Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >Ragnar Beer >Sent: Wednesday, August 02, 2000 1:30 AM >To: [EMAIL PROTECTED] >Subject: [Zope] zope/proxy_pass configuration problem > > >Hi Zope-Configuristas! > >I would finally like to say goodbye to pcgi but one thing keeps me >hooked. I tried and tried but the solution just won't appear. Here is >the problem: > >I have a site that is supposed to be reachable via http as well as >via https. That's not a problem per se. Configuration of zope with >proxy_pass is easy as can be. The problem is that management shall be >possible via https _only_ (for obvious reasons). But as soon as I use >site access to define the http-branch this branch is not >managable/accessable via https any more. Is there a solution? > >Ragnar > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] zope/proxy_pass configuration problem
Hi Zope-Configuristas! I would finally like to say goodbye to pcgi but one thing keeps me hooked. I tried and tried but the solution just won't appear. Here is the problem: I have a site that is supposed to be reachable via http as well as via https. That's not a problem per se. Configuration of zope with proxy_pass is easy as can be. The problem is that management shall be possible via https _only_ (for obvious reasons). But as soon as I use site access to define the http-branch this branch is not managable/accessable via https any more. Is there a solution? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] tree plus/minus url
Howdy! I've been experimenting with trees for a while and discovered that almost all innocent first time clickers were clicking on the text _behind_ the plus and minus images instead on the images themselves. So I decided to make the text a link with the same url as the image has but I can't find the right variable. Where is that url stored? Can anybody help? Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] DA, MySQL and Unix socket
If you have Zope and MySQL running on the same machine and want the socket connection in order to make MySQL invisible to the outside world you can as well bind it to 127.0.0.1 and use standard ZMySQLDA. Ragnar >hi... > >There'a any DA around there that allow a unix socket connection to a MySQL >server? >And if it is, it will be fast than a TCP connection? >I'm running zope and mysql on the same server > >Thanks > >-- >--- >Diego Rodrigo Neufert >-webmaster >--- >(Magic Web Design) >(email) ([EMAIL PROTECTED]) >(curitiba) (pr) > >___ >Zope maillist - [EMAIL PROTECTED] >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] 2.2 installation problem on Linux
I tried, but got a segmentation fault in the ./configure step. Never happened to me so far. Anybody else? --Ragnar >Hello, > >At 19:26 15.07.2000 +0000, Ragnar Beer wrote: >>Zope 2.2 (linux2) installs and works fine using ZServer but for >>whatever reason there is no pcgi-wrapper built in the pcgi dir so >>that I cannot call Zope.cgi. I checked again and again but ./install >>doesn't give an error message. What am I doing wrong? > >It seems they forgot to compile the PCGI wrapper... here is what you >should do to make it work: >-- >cd pcgi >sh ./configure >make >- > >Worked fine for me. > >Best regards, > >Gérard Métrailler Jr. > >Meeting Maker Inc. >... the intelligent choice for collaborative scheduling > >Email: [EMAIL PROTECTED] >Web: http://www.meetingmaker.com ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] 2.2 installation problem on Linux
Howdy! Zope 2.2 (linux2) installs and works fine using ZServer but for whatever reason there is no pcgi-wrapper built in the pcgi dir so that I cannot call Zope.cgi. I checked again and again but ./install doesn't give an error message. What am I doing wrong? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Squid and SSL
Howdy! Has anybody already successfully tried squid-2.4-DEVEL2 with the SSL patch from squid.sourceforge.net to make Squid an SSL-frontend for Zope? browser <--https-> squid <--http-> zserver internet localhost --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] automatic link adjustment
Howdy Zopistas out there! I just ran into some kind of administrative problem: my students are not so willing anymore when it comes to changing links for the third revision of our website. There are about 200 links to change manually and they have my full sympathy. Apart from that this process is quite error-prone and always needs a lot of testing. Is it possible to have automatic link adjustment in Zope if you change an objects name? I mean like in Dreamweaver or whatever website management programm so that it would ask whether to adjust the referring links if you change a page's name? I know we could do the management partly with Dreamweaver and put the files via ftp but whatever sends cleartext passwords is not an option. So ftp is out. Any other way? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Number of zope processes on Linux and OpenBSD
>On Fri, 7 Jul 2000, Ragnar Beer wrote: >> Howdy! I have a question concerning the number of running zope >> processes: I used to run Zope under Linux and there was always more >> than a handful of zope processes running. Now I switched to OpenBSD >> and there is only one. How comes? I guess the more zope processes I >> have running the more requests I can satisfy? > >This is because on linux /bin/ps shows ALL threads as processes; on >other unicies ps show only main thread. Interesting. I only realized that ps gives less information under OpenBSD over all than under Linux. Is there a way to see how many threads are actually running? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] Number of zope processes on Linux and OpenBSD
Howdy! I have a question concerning the number of running zope processes: I used to run Zope under Linux and there was always more than a handful of zope processes running. Now I switched to OpenBSD and there is only one. How comes? I guess the more zope processes I have running the more requests I can satisfy? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] too many open files
Help! Zope 2.1.6 refuses to work in the middle of an external method on my i386 running under OpenBSD 2.7. Is says: OSError [Errno 24] Too many open files: '[EMAIL PROTECTED]' I've never ever seen this problem before and this external method used to work well until some minutes ago. Now the error keeps reappearing even after rebooting and also other external methods that used to run well now deliver the same message. Does anybody have suggestions how to diagnose/cure this problem? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] mod_rewrite rule to close managmentscreensfromoutsiders
>Ragnar Beer wrote:
>>
>> >Ragnar Beer wrote:
>> >>
>> >> > > I'm trying to deny external access to zope maintainance
>>from elsewhere
>> >> >> (just for sure), with Zope behind apache. However, It
>> >> >> just doesn't seem work... Sure It's more apache's problem,
>>but I guess
>> >> >> someone around there has a working solution?
>> >> >>
>> >> >> #
>> >> >> dule mod_rewrite.c>
>> >> >> RewriteEngine on
>> >> >> RewriteCond %{HTTP:Authorization} ^(.*)
>> >> >> RewriteRule ^/Zope(.*) /usr/lib/cgi-bin/Zope/$1
>> >> >[e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l]
>> >> >>
>> >> >> RewriteCond %{REMOTE_ADDR} !^193\.143\.156\.(.*)
>> >> >> RewriteRule ^/Zope.*manage - [F]
>> >> >> #
>> >> >>
>> >> > > --
>> >>
>> >> I'm using
>> >>
>> >>
>> >> Deny from all
>> >>
>> >>
>> >> to block any request from my virtual server on port 80 that is under
>> >> the /ssl directory or has "manage" in it. You could then allow from
>> >> localhost.
>> >>
>> >> I was thinking about extending this idea to protect myself from
>> >> possible seccurity-holes in zope by denying everything and allowing
>> >> only requests ending in _html or _img. Any opinions on that?
>> >
>> >What about callable objects that don't end in either of these?
>> >
>>
>> They wouldn't be callable from outside any more. This is the "deny
>> everything that isn't allowed explicitly" policy. If I'd want them to
>> be callable I'd have to put something in their names the makes it
>> possible to identify them and then allow access.
>
>
>That's an awful lot of code to rewrite ;)
Right, this is rather a strategy to follow from the beginning.
Otherwise - arghh! (But it's very proactive, isn't it?)
--Ragnar
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] PowerMac 7500 with LinuxPPC and Zope?
>On Wed, 28 Jun 2000, Daniel Muller wrote: >> Hi, >> >> I would like to turn an old Mac 7500 into a Zope server. LinuxPPC installs >> on the Mac PowerPC using the Red Hat 6.1 linux distribution. Does anyone >> have any experience with Zope with this type of set up? >> >Hmm.. sounds like fun. If pyton runs on that distribution (and it almost >cerainly will) you should have no problems running ZOPE. I am currently >running zope on a RH6.1 i386 install, so unless there are some major >differnces (apart from the CPU, of course :) it should run like a dream. > >> Should I consider a different linux distribution than PPC? > >Well, aside from Yellow Dog, are there really any other Linux distros suited >to the PPC? I'm running Suse 6.4 on my G3 Powerbook. Works just as fine as on i386:) --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] mod_rewrite rule to close managment screensfromoutsiders
>Ragnar Beer wrote:
>>
>> > > I'm trying to deny external access to zope maintainance from elsewhere
>> >> (just for sure), with Zope behind apache. However, It
>> >> just doesn't seem work... Sure It's more apache's problem, but I guess
>> >> someone around there has a working solution?
>> >>
>> >> #
>> >> dule mod_rewrite.c>
>> >> RewriteEngine on
>> >> RewriteCond %{HTTP:Authorization} ^(.*)
>> >> RewriteRule ^/Zope(.*) /usr/lib/cgi-bin/Zope/$1
>> >[e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l]
>> >>
>> >> RewriteCond %{REMOTE_ADDR} !^193\.143\.156\.(.*)
>> >> RewriteRule ^/Zope.*manage - [F]
>> >> #
>> >>
>> > > --
>>
>> I'm using
>>
>>
>> Deny from all
>>
>>
>> to block any request from my virtual server on port 80 that is under
>> the /ssl directory or has "manage" in it. You could then allow from
>> localhost.
>>
>> I was thinking about extending this idea to protect myself from
>> possible seccurity-holes in zope by denying everything and allowing
>> only requests ending in _html or _img. Any opinions on that?
>
>What about callable objects that don't end in either of these?
>
They wouldn't be callable from outside any more. This is the "deny
everything that isn't allowed explicitly" policy. If I'd want them to
be callable I'd have to put something in their names the makes it
possible to identify them and then allow access.
--Ragnar
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] mod_rewrite rule to close managment screens fromoutsiders
> > I'm trying to deny external access to zope maintainance from elsewhere
>> (just for sure), with Zope behind apache. However, It
>> just doesn't seem work... Sure It's more apache's problem, but I guess
>> someone around there has a working solution?
>>
>> #
>> dule mod_rewrite.c>
>> RewriteEngine on
>> RewriteCond %{HTTP:Authorization} ^(.*)
>> RewriteRule ^/Zope(.*) /usr/lib/cgi-bin/Zope/$1
>[e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l]
>>
>> RewriteCond %{REMOTE_ADDR} !^193\.143\.156\.(.*)
>> RewriteRule ^/Zope.*manage - [F]
>> #
>>
> > --
I'm using
Deny from all
to block any request from my virtual server on port 80 that is under
the /ssl directory or has "manage" in it. You could then allow from
localhost.
I was thinking about extending this idea to protect myself from
possible seccurity-holes in zope by denying everything and allowing
only requests ending in _html or _img. Any opinions on that?
--Ragnar
___
Zope maillist - [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://lists.zope.org/mailman/listinfo/zope-announce
http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] Zope on OpenBSD
>Don't use the version from the ports tree. That's absolutely right. Use the package instead! You can simply ftp the python-1.5.2 package from ftp.openbsd.org or one of its mirrors. This way it took me about 5 minutes to get Zope running from source under OpenBSD 2.6 on an i386. No need to build Python yourself:) --Ragnar > >Build and install Python yourself -- the ports tree that comes with the >OpenBSD 2.6 disk builds an older version of Python. > >Then download, build and install your own copy of Zope from the source >version. > >It's actually VERY EASY to build and install Zope from the source, I >recommend that everybody learn that method. > >dave > >Kevin Schaefer wrote: > > > > I have read great things about OpenBSD's security and would like to build a > > dedicated server just for Zope/MySQL. Any suggestions before I embark into > > this? > > ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] tree state cookie
Howdy! I just recently got complaints from people visiting my web site. They have activated the "website wants to set cookie" alarm and they got lots of alarms when visiting my website. Since I never use any cookies it wasn't hard to find the cause: I wasn't aware that trees use cookies to store their state. Is there an option to disable this? (Cuz I don't want no cookies;) --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] security issues
> > I will soon have a Zope-site ready to go online. How can I make shure > > that I did everything (concerning Zope) to stop intruders? Where can > > I find information about protecting a Zope-site? Has anyone had > > security problems so far? > >Easiest (most brutal?) fix I've found - hide Zope behind an Apache, >and prohibit access to any URLs of the form .*/manage.* This is what I'm doing at the moment (more or less) but your question made me think. Actually this is an example of "allow anything that isn't explicitly denied" which is not a very good policy if you want security. I remember (but - darn - can't remember where I have it) a posting that said that anyone can easily see the names of all objects in a folder which is nice intelligence gathering. I guess it would be much better (and even more brutal;) to deny everything that isn't allowed explicitly. I'll try that later. I think I'll have to allow .*_html and .*_img for the http protocol plus all the .*/manage.* stuff for https and perhaps also make some (not so secure) restrictions based on ip adresses. --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
[Zope] security issues
Howdy everyone! I will soon have a Zope-site ready to go online. How can I make shure that I did everything (concerning Zope) to stop intruders? Where can I find information about protecting a Zope-site? Has anyone had security problems so far? --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Re: [Zope] ANN: Perl For Zope
I guess that many of us - like me - have come to Zope and Python after some experience with Perl. I'm really glad I learned Python after programming in Perl, C, R, Lisp, Pascal, Forth, Basic and Assembler. Python nowadays clearly is my favorite and Perl is located on the other end together with assembler. Python helps me writing structured programms and I am able to read my code after a while even if I didn't always take enough time to add comments. On the other hand I still have my TPJ subscription and I don't mind if it is _possible_ to use external perl functions as long as I don't _have_to_. A really horrible vision for me would be if Zope itself or parts of it were rewritten in Perl... arghh! --Ragnar ___ Zope maillist - [EMAIL PROTECTED] http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
