March 2003 - Zope-Dev

ZPublisher.Client and encrypted passwords
by Danny W. Adair 26 Mar '03

26 Mar '03

Hi, I need to make an authenticated call from one Zope server to another. Although the two servers share most of their object trees (including the main user folder) through a common ZEO ClientStorage, I have to call the script on a _specific_ machine, since it will make changes to the local file system. So basically, I want to do something similar to calling http://currentUID:currentPWD@other_host/makeLocalChanges Now my problem(I'm using ZPublisher.Client): I have to make that call with the current (!) user's name and password (which are stored on both machines thanks to the ClientStorage) but the passwords in my user folder are encrypted - which I had thought was a (TM) good thing. :-) So calling _getPassword() on the user object gives me something that starts with "{SHA}", which ZPublisher.Client.call() won't eat - it expects a plain password and then does the usual base64. How can I accomplish this? I figure I either need to - find a way to get the unencrypted password. I consider this the less elegant (and less secure) approach: I don't want to _know_ the current user's password, I just want to _use_ it... :-) - use a different approach to call the other server (like passing a copy of the current Auth header or something...) I'm not sure how to do either... Thank you very much for your help, Danny

4 6

ZConfig 1.0 release
by Fred L. Drake, Jr. 25 Mar '03

25 Mar '03

I've just released ZConfig 1.0 for people who'd like to try it out outside of Zope. Chris McDonough will be presenting our paper on ZConfig at PyCon DC on Thursday; be sure to catch it! ZConfig is a configuration library intended for general use. It supports a hierarchical schema-driven configuration model that allows a schema to specify data conversion routines written in Python. ZConfig's model is very different from the model support by the ConfigParser module found in Python's standard library, and is more suitable to configuration-intensive applications. ZConfig schema are written in an XML-based language and are able to "import" schema components provided by Python packages. Since components are able to bind to conversion functions provided by Python code in the package (or elsewhere), configuration objects can be arbitrarily complex, with values that have been verified against arbitrary constraints. This makes it easy for applications to separate configuration support from configuration loading even with configuration data being defined and consumed by a wide range of separate packages. ZConfig is licensed under the Zope Public License, version 2.0. See the file LICENSE.txt in the distribution for the full license text. Information on the latest released version of the ZConfig package is available at http://www.zope.org/Members/fdrake/zconfig/ Reference documentation is available in the ZConfig/doc/ directory of the distribution. -Fred -- Fred L. Drake, Jr. <fred at zope.com> PythonLabs at Zope Corporation

1 0

SSL Support
by Matt Ficken 25 Mar '03

25 Mar '03

Does Zope support SSL? Is there a way I can enable/activate that support from a product? -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup

1 0

Refresh bug revisited
by Johan Carlsson [EasyPublisher] 25 Mar '03

25 Mar '03

Now I have a scenario in which I can't get the refresh of a Python Product to work. I have a Product that don't define any addable objects only base classes (EasyCore). I it I have a class EasyObjectLink which inherits "from Persistence import Persistent". If I refresh EasyCore Persistent will be None. Because Persistent isn't a Product it self it can't be explicitly added to be refreshed? I will try to reproduce this in a smaller package (I have a refresh bug product I'm tryning to pin down this problem in). Best Regards, Johan Carlsson -- Easy Publisher Developers Team Johan Carlsson johanc(a)easypublisher.com Mail: Birkagatan 9 SE-113 36 Stockholm Sweden Phone +46-(0)8-32 31 23 Fax +46-(0)8-32 31 83 Mobil +46-(0)70-558 25 24 http://www.easypublisher.com

1 0

Possible security problem with DTML
by kosh 25 Mar '03

25 Mar '03

I am having a problem where DTML is allowing access to an attribute of an object that restrictedTraverse and regular . notation denies from a python script. I have a python product and I have the securit.setDefaultAccess('deny') so that items inside there without security declarations can't be called and this works for url traversal, restrictedTraverse and getting to the object via python scripts in that access is denied but dtml can get right in which is a problem. Lets say I have container foo with object bar in an and inside bar an object which should not be allowed accessed. <dtml-var "foo.bar.shouldnotwork"> gives the value of shouldnotwork however <dtml-var "restrictedTraverse('foo/bar/shouldnotwork')'> gives access denied and from a python script return context.foo.bar.shouldnotwork gives an access denied also which is what I expect. For a ZPT object I get the same result of access being denied for <span tal:replace="here/foo/bar/shouldnotwork"></span> Thus I suspect the problem is with DTML somewhere but I am not sure where. However I could also be doing something wrong in my python product but currently I can no imagine what would allow that dtml to do it but nothing else. The variable shouldnotwork is just a string that is stored in object bar.

3 3

Re: [Zope-dev] Let's have another bug day
by Lennart Regebro 24 Mar '03

24 Mar '03

Leonardo Rochael Almeida wrote: > Hi people, > > It's been some time now since we last had a bug day. Should we have > another one? I'd like one. :)

1 0

collector issue 863 "propfind" bugfix
by Simon Eisenmann 24 Mar '03

24 Mar '03

See: http://collector.zope.org/Zope/863 the attached patch file solves this problem by always setting the handle_xml method with default parameters if body does not start with <?xml ..> the patch is against lib/python/Shared/DC/xml/xmllib.py of zope version 2.6.1 best regards, simon -- Simon Eisenmann [ mailto:simon@struktur.de ] [ struktur AG | Junghansstraße 5 | 70469 Stuttgart ] [ T. +49.711.896656.68 | F.+49.711.89665610 ] [ http://www.struktur.de | mailto:info@struktur.de ]

2 1

LocalFS trouble (zope-2.6.1 with python2.2.2)
by Shu KONNO 24 Mar '03

24 Mar '03

hello I think that the LocalFS Product might have a problem with python 2.2.2. In my environment, zope object at the local file's URL has an empty docstring, so that the site error occur. I found that _getWrapper() function in LocalFS/LocalFS.py at line 294 return the object, and the class ObjectWrapper in the function define the class, with empty docstring {__doc__ : None}. It may need to have no '__doc__' in it's dict, in order to inherit base class docstring. The ExtensionClass migth be working different way to define the class. I dont't know whether the issue is owing to the ExtensionClass or the LocalFS. for example: ---------------------------------- from ExtensionClass import Base class MyClass(Base): """this is MyClass""" def __class_init__(self): """class intializer""" class Wrapper: """this is Wrapper""" def getWrapper(): class ObjectWrapper(Wrapper, MyClass): pass return ObjectWrapper if __name__ == '__main__': w = getWrapper() print 'docstring: ', w.__doc__ ---------------------------------- This script will display "docstring: this is Wrapper" with python 2.1.3, but with python 2.2.2 will display "docstring: None" Then, I wrote this patch for LocalFS/LocalFS.py: ---------------------------------- 294 class ObjectWrapper(Wrapper, c): pass + if ObjectWrapper.__dict__.has_key('__doc__'): + del ObjectWrapper.__dict__['__doc__'] ---------------------------------- Is it correct? environments: 1) zope 2.6.1, python 2.1.3, gcc 2.95.3, and linux kernel 2.4.18. 2) zope 2.6.1, python 2.2.2, gcc 3.2.2, and linux kernel 2.4.20. thanks! -- Shu Konno (owa)

1 0

zope-2.6.1+zeo-2.0.2 not trouble
by Bakhtiar A Hamid 24 Mar '03

24 Mar '03

hi i've posted this to zope list, and got hints from dieter about the toby-clean-shutdown branch. i apologize if this is not appropriate. i'm restating the question again: since upgrading zope from 2.5.1 + zeo1, i've been having frequent zope/zeo client hanging/not responding. the setup: we have zope-2.6.1-src + zeo-2.0.2 on linux with python 2.1.3 frequently, the zeo client hangs/not responding. output of ps axf is below[1] and the stupid.log[2] i've setup stupid_log_severity=-100 fr ZEO_EVENTS.log, and the last 20 lines of the log is attached. this is when all zeo clients failed to get to the zeoserver.[3] restarting the zeoserver makes things peachy again also, sometimes i got this error[4] in ZEO_EVENTS.log. telnet localhost 8080 GET / HTTP/1.0\n\n resulted in nothing. no time out, nothing running ./stop will only kill the parent process, i.e 17160 in the below example. the other processes can only be killed with a kill -9 17161. restarting the zeoclient will make it respond again. i've tried zeo2.1a1( iirc) and the behaviour is the same i used to run with persistent zeo cache (ZEO_CLIENT=12000) in the ENV, but running without is still the same. i've also tried runnin with -Z1, and -Z- also the same behaviour thanks for any help/pointers ------ ps axf [1] # ps axf|grep py 17560 pts/0 D 0:00 \_ grep py 17160 ? SW 0:00 /usr/bin/python2.1 /usr/local/Zope-2.6.1-src/z2.py -X 17161 ? S 16:39 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1-src/z2.p 17162 ? S 0:00 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1-src/ 17165 ? R 26:09 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1- 17166 ? S 28:26 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1- 17167 ? S 26:50 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1- 17168 ? S 27:11 \_ /usr/bin/python2.1 /usr/local/Zope-2.6.1- [2]# tail var/stupid.log ------ 2003-03-21T10:24:53 BLATHER(-100) zrpc-conn:192.168.1.2:12000 calling Invalidate([('\x00\x00\x00\x00\x01\x0bQ\xec', ''), ('\x00\x00\x00\x00\... ------ 2003-03-21T10:25:20 BLATHER(-100) zrpc-conn:192.168.1.2:12000 calling Invalidate([('\x00\x00\x00\x00\x00\x00$\xae', ''), ('\x00\x00\x00\x00\... ------ 2003-03-21T10:25:28 BLATHER(-100) zrpc-conn:192.168.1.2:12000 calling Invalidate([('\x00\x00\x00\x00\x00\x1c\x9a\xd9', ''), ('\x00\x00\x00\x... ------ 2003-03-21T10:25:50 BLATHER(-100) zrpc-conn:192.168.1.2:12000 calling Invalidate([('\x00\x00\x00\x00\x01\x0bQ\xea', ''), ('\x00\x00\x00\x00\... ------ 2003-03-21T10:25:53 BLATHER(-100) zrpc-conn:192.168.1.2:12000 calling Invalidate([('\x00\x00\x00\x00\x01\x0bQ\xea', ''), ('\x00\x00\x00\x00\... [3]# tail -20 ZEO_EVENTS.log.1 ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x01![\xf6', '\x03K\xc4\x88\x17b\xc7\xbb',... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x01*Of', '\x03K\xc4\x88\x17b\xc7\xbb', '(... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x01*N\xea', '\x03K\xc4\x88\x17b\xc7\xbb',... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x01*N\xeb', '\x03K\xc4\x88\x17b\xc7\xbb',... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x01!Z\n', '\x03K\xc4\x88\x17b\xc7\xbb', '... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling storea('\x00\x00\x00\x00\x00\xb0_\xfd', '\x03K\xc4\x88\x17b\xc7\xb... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.2:36996 calling vote('\x03K\xc4\x88\x1d$\x91f') ------ 2003-03-24T03:20:07 INFO(0) ZSS:15977/192.168.1.2:36996 Transaction blocked waiting for storage. Clients waiting: 3. ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.3:50444 calling tpc_begin('\x03K\xc4\x89\xc2\xa9-\x88', ' None', '/Poll/BHQ5/processV... ------ 2003-03-24T03:20:07 BLATHER(-100) zrpc-conn:192.168.1.3:50444 calling tpc_abort('\x03K\xc4\x89\xc2\xa9-\x88') [4]------ 2003-03-24T09:28:16 ERROR(200) Conflict Resolution Unexpected error Traceback (innermost last): File /usr/local/Zope-2.6.1-src/lib/python/ZODB/ConflictResolution.py, line 96, in tryToResolveConflict (Object: /usr/local/ZopeHome/var/Data.fs) SystemError: Failed to import class ClassicHTMLFile from module App.special_dtml ----

1 0

Encryption help
by Matt Ficken 23 Mar '03

23 Mar '03

I am making a product that needs to recieve requests from clients over HTTPS and store data in an encrypted form only. Does Zope support HTTPS, and if yes, how do I activate that support? Further, how can I encrypt some files my product generates and have Zope write only the encrypted version to disk? -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup

2 1