Re: [Zope] sending a encrypted login URL

2009-03-05 Thread Joseph Thomas (s) 
Thanks, could you elaborate a bit, I'm somewhat new zope/plone:

I assume we'd need a shared key on both on ore j2ee server and zope, and
did you need to create any changes to Plone PAS?



-Original Message-
From: Dieter Maurer [mailto:die...@handshake.de] 
Sent: Thursday, March 05, 2009 1:55 PM
To: Joseph Thomas (s)
Cc: zope@zope.org
Subject: Re: [Zope] sending a encrypted login URL

Joseph Thomas (s) wrote at 2009-3-4 10:29 -0600:
We'd like to construct a zope login URL of the form on another server:
http://zope.domain:port/context/logged_in?__ac_name=uzz__ac_passwo
r
d=xxxsubmit=Log+in
where the ac_name and ac_password parameters are encrypted using zope
public key (?) and have the parameters decrypted when zope receives the
request and login the user.
Is there an API or some way to encrypt the username and password on the
3rd party app server and configure zope so that it treats the
parameters
as encrypted values rather than plaintext?

We are doing this using the Python package M2Crypto.EVP
for the encryption/decryption.



-- 
Dieter
Consider our environment; please print this e-mail only if truly
necessary. Thank you! 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] sending a encrypted login URL

2009-03-04 Thread Joseph Thomas (s) 
We'd like to construct a zope login URL of the form on another server:

 

http://zope.domain:port/context/logged_in?__ac_name=uzz__ac_passwor
d=xxxsubmit=Log+in

 

 

where the ac_name and ac_password parameters are encrypted using zope
public key (?) and have the parameters decrypted when zope receives the
request and login the user.

 

Is there an API or some way to encrypt the username and password on the
3rd party app server and configure zope so that it treats the parameters
as encrypted values rather than plaintext?

 

Joseph Thomas

College of American Pathologists

http://www.cap.org http://www.cap.org/ 

 



Consider our environment; please print this e-mail only if truly
necessary. Thank you! ___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] FW: sending a encrypted login URL

2009-03-04 Thread Joseph Thomas (s) 


-Original Message-
From: Joseph Thomas (s) 
Sent: Wednesday, March 04, 2009 10:50 AM
To: 'li...@zopyx.com'
Subject: RE: [Zope] sending a encrypted login URL

I think I get what you're suggesting, but let me clarify.

I actually wanted the sensitive portions of URL to be encrypted..because it 
will be link on a page that says login to zope..but I wouldn't want the user 
or a snooper to be able to view the page source and figure out the URL pattern 
and the username/password.

SSL will ensure that the transport between the browser and the zope server will 
be encrypted using PKI, but I really want to obfuscate the user name and 
password parameters in the login URL. So that that if some1 where to view the 
source they'd see  garbled username/password parameters.

I suppose I could use the PKI to encrypt the username/password with my zope 
server's public key (but is there a API to do this on a J2EE container) and 
then have my zope server decrypt using its private key (but how would zope know 
that the username/password parameters are 2 be treated as encrypted data)?
-Original Message-
From: Andreas Jung [mailto:li...@zopyx.com] 
Sent: Wednesday, March 04, 2009 10:38 AM
To: Joseph Thomas (s)
Cc: zope@zope.org
Subject: Re: [Zope] sending a encrypted login URL

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Use SSL and you're done.

- -aj

On 04.03.2009 17:29 Uhr, Joseph Thomas (s) wrote:
 We'd like to construct a zope login URL of the form on another server:
 
  
 
 http://zope.domain:port/context/logged_in?__ac_name=uzz__ac_password=xxxsubmit=Log+in
 http://zope.domain:port/context/logged_in?__ac_name=uzz__ac_password=xxxsubmit=Log+in
 
  
 
  
 
 where the ac_name and ac_password parameters are encrypted using zope
 public key (?) and have the parameters decrypted when zope receives the
 request and login the user.
 
  
 
 Is there an API or some way to encrypt the username and password on the
 3^rd party app server and configure zope so that it treats the
 parameters as encrypted values rather than plaintext?
 
  
 
 Joseph Thomas
 
 College of American Pathologists
 
 http://www.cap.org http://www.cap.org/
 
  
 
 
 
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists - 
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )


- -- 
ZOPYX Ltd.  Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany
Web: www.zopyx.com - Email: i...@zopyx.com - Phone +49 - 7071 - 793376
Registergericht: Amtsgericht Stuttgart, Handelsregister A 381535
Geschäftsführer/Gesellschafter: ZOPYX Limited, Birmingham, UK
- 
E-Publishing, Python, Zope  Plone development, Consulting

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkmurnAACgkQCJIWIbr9KYylKQCgn3WWP5SzGrrAQbJIQXv7Bfac
3fwAoIiI4iwtVBFVRg7jtZu5Vgy5fw3f
=MHol
-END PGP SIGNATURE-
Consider our environment; please print this e-mail only if truly
necessary. Thank you! 
___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] What am I getting with a plone windows installer?

2009-01-26 Thread Joseph Thomas (s) 
 

I recently installed plone from plone.org, just curious what's the
difference between the python installation that's bundle with plone
and/or zope and a stand-alone python installation?

 

Can I use the bundled python installation as the base for other
applications that need python, like wxPython?

Joseph Thomas

College of American Pathologists

http://www.cap.org http://www.cap.org/ 

 



Consider our environment; please print this e-mail only if truly
necessary. Thank you! ___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

[Zope] Error in python method...

2009-01-13 Thread Joseph Thomas (s) 

I'm going thru the online zope book (2.6) and trying out the simple
interest rate calculator web application under the section: 


Creating a Basic Zope Application Using Page Templates and Scripts


http://www.zope.org/Documentation/Books/ZopeBook/2_6Edition/BasicObject.
stx


I'll attach the error log:


 

Time

2009/01/13 09:57:11.072 US/Central

User Name (User Id)

admin (admin)

Request URL

http://localhost:8080/interest/interestRateDisplay

Exception Type

AttributeError

Exception Value

calculateCompoundingInterest

Traceback (innermost last): 

*   Module ZPublisher.Publish, line 119, in publish
*   Module ZPublisher.mapply, line 88, in mapply
*   Module ZPublisher.Publish, line 42, in call_object
*   Module Shared.DC.Scripts.Bindings, line 313, in __call__
*   Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
*   Module Products.PageTemplates.ZopePageTemplate, line 330, in
_exec
*   Module Products.PageTemplates.ZopePageTemplate, line 427, in
pt_render
*   Module Products.PageTemplates.PageTemplate, line 89, in
pt_render
*   Module zope.pagetemplate.pagetemplate, line 117, in pt_render
*   Module zope.tal.talinterpreter, line 271, in __call__
*   Module zope.tal.talinterpreter, line 346, in interpret
*   Module zope.tal.talinterpreter, line 623, in do_insertText_tal
*   Module Products.PageTemplates.Expressions, line 228, in
evaluateText
*   Module zope.tales.tales, line 696, in evaluate
URL: /interest/interestRateDisplay
Line 10, Column 4
Expression: PythonExpr
here.calculateCompoundingInterest(principal, interest_rate, periods,
years)
Names:

*{'container': Folder at /interest,
* 'context': Folder at /interest,
* 'default': object object at 0x0071C528,
* 'here': Folder at /interest,
* 'loop': {},
* 'nothing': None,
* 'options': {'args': ()},
* 'repeat':
Products.PageTemplates.Expressions.SafeMapping object at 0x06EB1A08,
* 'request': HTTPRequest,
URL=http://localhost:8080/interest/interestRateDisplay,
* 'root': Application at ,
* 'template': ZopePageTemplate at
/interest/interestRateDisplay,
* 'traverse_subpath': [],
 'user': PropertiedUser 'admin'}

*   Module Products.PageTemplates.ZRPythonExpr, line 49, in __call__
__traceback_info__: here.calculateCompoundingInterest(principal,
interest_rate, periods, years)
*   Module PythonExpr, line 1, in expression

AttributeError: calculateCompoundingInterest 


form

interest_rate

12.0

years

12

periods

4

principal

2.0


 


 


Does this indicate an error with my python script?


 


 

 

Joseph Thomas

College of American Pathologists

http://www.cap.org http://www.cap.org/ 

 



Consider our environment; please print this e-mail only if truly
necessary. Thank you! ___
Zope maillist  -  Zope@zope.org
http://mail.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://mail.zope.org/mailman/listinfo/zope-announce
 http://mail.zope.org/mailman/listinfo/zope-dev )

Re: [Zope] Error in python method...

2009-01-13 Thread Joseph Thomas (s) 
Its not zope perse, but Plone that we're customizing. I may be able to sell 
zope 3/Grok etc but it all hinges on plone support on the underlying app server 
or framework. Is plone ready to run on Grok? 
-Original Message-
From: Jeff Peterson [mailto:jeff.peter...@crary.com] 
Sent: Tuesday, January 13, 2009 1:36 PM
To: li...@zopyx.com; Joseph Thomas (s)
Cc: zope@zope.org
Subject: RE: [Zope] Error in python method...

Agreed, if you are going through the learning curve anyway, may as well be the 
new way.  Grok, in fact, may take less time to get into for basic apps.

--
Jeffrey D Peterson
Webmaster
Crary Industries, Inc.


-Original Message-
From: zope-boun...@zope.org [mailto:zope-boun...@zope.org] On Behalf Of Andreas 
Jung
Sent: Tuesday, January 13, 2009 10:54 AM
To: Joseph Thomas (s)
Cc: zope@zope.org
Subject: Re: [Zope] Error in python method...

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If you are new to Zope and/or interested in Zope, you are possibly more 
interested in using GROK (grok.zope.org) for getting started with Zope instead 
of using the old Zope 2 system.

- -aj

On 13.01.2009 17:36 Uhr, Joseph Thomas (s) wrote:
 
 *I'm going thru the online zope book (2.6) and trying out the simple
 interest rate calculator web application under the section*:
 
 
 *Creating a Basic Zope Application Using Page Templates and 
 Scripts*
 
 
 
 *http://www.zope.org/Documentation/Books/ZopeBook/2_6Edition/BasicObje
 ct.stx*
 
 
 *I'll attach the error log:*
 
 
 * *
 
 *Time*
 
   
 
 2009/01/13 09:57:11.072 US/Central
 
 *User Name (User Id)*
 
   
 
 admin (admin)
 
 *Request URL*
 
   
 
 http://localhost:8080/interest/interestRateDisplay
 
 *Exception Type*
 
   
 
 AttributeError
 
 *Exception Value*
 
   
 
 calculateCompoundingInterest
 
 Traceback (innermost last):
 
 * Module ZPublisher.Publish, line 119, in publish
 * Module ZPublisher.mapply, line 88, in mapply
 * Module ZPublisher.Publish, line 42, in call_object
 * Module Shared.DC.Scripts.Bindings, line 313, in __call__
 * Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
 * Module Products.PageTemplates.ZopePageTemplate, line 330, in _exec
 * Module Products.PageTemplates.ZopePageTemplate, line 427, in pt_render
 * Module Products.PageTemplates.PageTemplate, line 89, in pt_render
 * Module zope.pagetemplate.pagetemplate, line 117, in pt_render
 * Module zope.tal.talinterpreter, line 271, in __call__
 * Module zope.tal.talinterpreter, line 346, in interpret
 * Module zope.tal.talinterpreter, line 623, in do_insertText_tal
 * Module Products.PageTemplates.Expressions, line 228, in evaluateText
 * Module zope.tales.tales, line 696, in evaluate
   *URL: /interest/interestRateDisplay*
   *Line 10, Column 4*
   *Expression: PythonExpr
   here.calculateCompoundingInterest(principal, interest_rate,
   periods, years)*
   *Names:*
 
 ·{'container': Folder at /interest,
 
 · 'context': Folder at /interest,
 
 · 'default': object object at 0x0071C528,
 
 · 'here': Folder at /interest,
 
 · 'loop': {},
 
 · 'nothing': None,
 
 · 'options': {'args': ()},
 
 · 'repeat': Products.PageTemplates.Expressions.SafeMapping 
 object at 0x06EB1A08,
 
 · 'request': HTTPRequest, 
 URL=http://localhost:8080/interest/interestRateDisplay,
 
 · 'root': Application at ,
 
 · 'template': ZopePageTemplate at 
 /interest/interestRateDisplay,
 
 · 'traverse_subpath': [],
 
  'user': PropertiedUser 'admin'}
 
 * Module Products.PageTemplates.ZRPythonExpr, line 49, in __call__
   __traceback_info__: here.calculateCompoundingInterest(principal,
   interest_rate, periods, years)
 * Module PythonExpr, line 1, in expression
 
 AttributeError: calculateCompoundingInterest
 
 
   *form*
 
 *interest_rate*
 
   
 
 12.0
 
 *years*
 
   
 
 12
 
 *periods*
 
   
 
 4
 
 *principal*
 
   
 
 2.0
 
 
 * *
 
 
 * *
 
 
 *Does this indicate an error with my python script?*
 
 
 * *
 
  
 
  
 
 Joseph Thomas
 
 College of American Pathologists
 
 http://www.cap.org http://www.cap.org/
 
  
 
 
 --
 --
 
 ___
 Zope maillist  -  Zope@zope.org
 http://mail.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://mail.zope.org/mailman/listinfo/zope-announce
  http://mail.zope.org/mailman/listinfo/zope-dev )


- -- 
ZOPYX Ltd.  Co. KG - Charlottenstr. 37/1 - 72070 Tübingen - Germany
Web: www.zopyx.com - Email: i...@zopyx.com - Phone +49 - 7071 - 793376
Registergericht: Amtsgericht Stuttgart, Handelsregister A 381535
Geschäftsführer