Re: [Zope-dev] zope.testbrowser and WebTest

2010-12-16 Thread Jan-Jaap Driessen
On 16 December 2010 08:38, Brian Sutherland wrote: > On Thu, Dec 16, 2010 at 12:06:36AM +0100, Hanno Schlichting wrote: >> On Wed, Dec 15, 2010 at 2:06 PM, Brian Sutherland >> wrote: >> > I've managed to get the existing tests to run against this browser with >> > two new testing dependencies: >>

[Zope-dev] Zope Tests: 73 OK, 15 Failed

2010-12-16 Thread Zope Tests Summarizer
Summary of messages to the zope-tests list. Period Wed Dec 15 12:00:00 2010 UTC to Thu Dec 16 12:00:00 2010 UTC. There were 88 messages: 8 from Zope Tests, 4 from buildbot at pov.lt, 26 from buildbot at winbot.zope.org, 11 from ccomb at free.fr, 39 from jdriessen at thehealthagency.com. Test fa

Re: [Zope-dev] Zope Tests: 73 OK, 15 Failed

2010-12-16 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Subject: FAILED : Zope Buildbot / zopetoolkit-py2.5 slave-ubuntu64 > From: jdriessen at thehealthagency.com > Date: Wed Dec 15 16:55:22 EST 2010 > URL: http://mail.zope.org/pipermail/zope-tests/2010-December/026754.html > > Subject: FAILED : Zope B

[Zope-dev] Plain-text passwords in your ZODB

2010-12-16 Thread Marius Gedminas
So, did you know that by default Zope stores a copy of every user's username and password in your ZODB, in plain text, on every login that uses forms and sessions (rather than HTTP basic auth)? Look for them in /++etc++site/default/PersistentSessionDataContainer, inside the numerous SessionCredent

Re: [Zope-dev] Plain-text passwords in your ZODB

2010-12-16 Thread Andreas Jung
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marius Gedminas wrote: > So, did you know that by default Zope stores a copy of every user's > username and password in your ZODB, in plain text, on every login that > uses forms and sessions (rather than HTTP basic auth)? By "Zope" you mean Zope 3, Z

Re: [Zope-dev] Plain-text passwords in your ZODB

2010-12-16 Thread Marius Gedminas
On Thu, Dec 16, 2010 at 08:39:40PM +0100, Andreas Jung wrote: > Marius Gedminas wrote: > > So, did you know that by default Zope stores a copy of every user's > > username and password in your ZODB, in plain text, on every login that > > uses forms and sessions (rather than HTTP basic auth)? > > B

Re: [Zope-dev] Plain-text passwords in your ZODB

2010-12-16 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/16/2010 02:58 PM, Marius Gedminas wrote: > On Thu, Dec 16, 2010 at 08:39:40PM +0100, Andreas Jung wrote: >> Marius Gedminas wrote: >>> So, did you know that by default Zope stores a copy of every user's >>> username and password in your ZODB, in

Re: [Zope-dev] Plain-text passwords in your ZODB

2010-12-16 Thread Wichert Akkerman
On 12/17/10 00:55 , Tres Seaver wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 12/16/2010 02:58 PM, Marius Gedminas wrote: >> On Thu, Dec 16, 2010 at 08:39:40PM +0100, Andreas Jung wrote: >>> Marius Gedminas wrote: So, did you know that by default Zope stores a copy of every u