- Zope-Dev - Zope lists

Re: fishing for dinosaurs...
by Chris Withers 04 Dec '01

04 Dec '01

Stephan Richter wrote: > > Time in my case at least. Over the last 6 month I have been gradually > working on SourceForge-like site. Why bother? Why not just use SourceForge? > - ZBabel (I have written some code that let's you update translations via a > Master Tower remotely. I would love it, if you could translate squishdot > with it...) How would I go abotu doing that? cheers, Chris

2 2

Re: [Zope-dev] Fully Zope-based Mailman Version
by Fred Wilson Horch 04 Dec '01

04 Dec '01

This is great! Finally somebody is working on integrating Mailman with Zope! Count me in -- we had a volunteer struggle with the Mailman code over the summer before giving up. Fred P.S. By the way, last week I added CGI 1.1 support to Zope 2.3.3. This allows us to run the existing Mailman code (version 2.0.7) as a CGI script without having to run another web server besides Zope / ZServer. If anyone is interested in this code, please let me know. Right now it is an external method that requires the PathHandler product. The basic idea is to parse the URL using PathHandler, which calls our external method. Our external method sets up the required environment variables (has to correct a few glitches introduced by Zope in the environment dictionary), forks and execs the CGI script with the cleaned up environment dictionary, parses the output the CGI script returns, cleans up its forked children, and returns the CGI script output to the browser. This is all working fine with Mailman 2.0.7, Python 1.5.2 and Zope 2.3.3. I've tested a few other CGI scripts. YMMV. Maybe Zope already supported CGI scripts, but I sure couldn't figure out how to make them work! -- Fred Wilson Horch mailto:fhorch@ecoaccess.org Executive Director, EcoAccess http://ecoaccess.org/ P.O. Box 2823, Durham, NC 27715-2823 phone: 919.419-8567

3 3

External Script python and CMF
by Pascal Samuzeau 04 Dec '01

04 Dec '01

Hello, I've installed a CMF site. I receive, by e-mail, some files in XML format, on another server than my Zope server. I need to create, update document, in the folder's Member who send me thoses files. Beacuse, I don't know how it's working, I've choose XML-RPC to have dialog between the two servers. Has someone an fully example, to do the same thing or near ? Sincerily PS -------------------------------------------------- Oreka ! Nous sommes l'internet moins cher ! Surfez 25% moins cher avec http://www.oreka.com

1 0

RE: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jay, Dylan 04 Dec '01

04 Dec '01

> -----Original Message----- > From: Jephte CLAIN [mailto:Jephte.Clain@univ-reunion.fr] > Sent: Tuesday, 4 December 2001 5:51 PM > To: Jay, Dylan > Cc: zope-dev(a)zope.org > Subject: Re: [Zope-Annce] jcNTUserFolder 0.2.1 released > > > "Jay, Dylan" wrote: > > One way is to not replicate the challenge-response > functionatlity at all. > this is the solution i have opted for. it has run now for two > years :-) > the problem is Zope cannot be in remote user mode and in > normal mode at > the same time. I think that setting up a zeo cluster (one > zope instance > that is served through IIS, and is used to update content, > and one which > has the normal behavior, and serves public content) could enable this, > but I haven't tried yet. There has to be some way round that. Is the REMOTE_USER variable still pased in even if zope isn't in remote user mode? Couldn't a user folder be implemented to use it? > > Put Zope behind IIS in two spots. One which is protected > and thus elicits a > > challenge/response and another that has IIS anoymous access > on it. Then get > > the zope security machinery to alternate between the two > urls depending on > > the security required. > please elaborate: you mean that when access to > http://iis.host.com/zope_anonymous.pcgi/protected_resource is > forbidden, > zope automatically redirect the user to > http://iis.host.com/zope_protected.pcgi/protected_resource? Yes, that's exactly what I mean. > > Then all you need is remote user mode in Zope to work > > by allowing any remote user secure access. Perhaps remembering new > > REMOTE_USER's so further roles can be associated with them. > I don't understand :-( I guess what I'm talking about is a user folder implementation that uses the REMOTE_USER variable and contructs a user object around that. It assumes that IIS has done it's job and the this REMOTE_USER is allowed in. It looks to see if it's seen this user before. If not it creates the user with some default role. If the user does exist with the same name as REMOTE_USER then this user is used with all it's associated roles etc. I had thought this is what jcNTUserFolder did but I couldn't get it to work like this. I think what it does do is try to authenticate directly with the nt domain server using a name and password supplied by the user?

2 1

RE: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jay, Dylan 04 Dec '01

04 Dec '01

One way is to not replicate the challenge-response functionatlity at all. Put Zope behind IIS in two spots. One which is protected and thus elicits a challenge/response and another that has IIS anoymous access on it. Then get the zope security machinery to alternate between the two urls depending on the security required. Then all you need is remote user mode in Zope to work by allowing any remote user secure access. Perhaps remembering new REMOTE_USER's so further roles can be associated with them. I've tried doing this in the past but I think my install of IIS was screwed and I couldn't use either jcNTUserFolder or GUF to allow any REMOTE_USER in, so I gave up. Would my idea work, or is it flawed? > -----Original Message----- > From: Jephte CLAIN [mailto:Jephte.Clain@univ-reunion.fr] > Sent: Tuesday, 4 December 2001 3:40 PM > To: Jay, Dylan > Cc: zope-dev(a)zope.org > Subject: Re: [Zope-Annce] jcNTUserFolder 0.2.1 released > > > "Jay, Dylan" wrote: > > Can I ask you a question? Something I;ve tried to do in the > past with > > jcNTUserFolder (maybe not tried hard enough) is this. I > want all my users to > > be authenticated via challenge-response mechanism such that > no one has to > > enter a username or password. > > >From what I can work out jcNTUserFolder doesn't actually > help with this at > > all, or have I missed something? > I wrote jcNTUserFolder just to do that, you know :-) > But, currently, you have to go through IIS. I think there is > an howto on > http://www.zope.org/Members/jephte > > I have tried to look at challenge/response authentication, > but it is so > hard and so much undocumented I left it. it would require to change > Medusa (IIS and IE have a no-close connection when in > challenge/response > mode. it seems it must be so at least for the > challenge/response part of > the protocol; I suppose it would require too much time if they have to > authenticate on each connection :), and to change Zope (you don't have > the password, just a hash, that you must ask the PDC to validate for > you, unless someone know how the hash is generated), and to have a > compatible User Folder. > > however, if someone can point me to a good source of > documentation about > that, and some example code, I may want to give it a try again. > > regards, > jephte.clain(a)univ-reunion.fr >

2 1

Re: [Zope-Annce] jcNTUserFolder 0.2.1 released
by Jephte CLAIN 04 Dec '01

04 Dec '01

"Jay, Dylan" wrote: > Can I ask you a question? Something I;ve tried to do in the past with > jcNTUserFolder (maybe not tried hard enough) is this. I want all my users to > be authenticated via challenge-response mechanism such that no one has to > enter a username or password. > >From what I can work out jcNTUserFolder doesn't actually help with this at > all, or have I missed something? I wrote jcNTUserFolder just to do that, you know :-) But, currently, you have to go through IIS. I think there is an howto on http://www.zope.org/Members/jephte I have tried to look at challenge/response authentication, but it is so hard and so much undocumented I left it. it would require to change Medusa (IIS and IE have a no-close connection when in challenge/response mode. it seems it must be so at least for the challenge/response part of the protocol; I suppose it would require too much time if they have to authenticate on each connection :), and to change Zope (you don't have the password, just a hash, that you must ask the PDC to validate for you, unless someone know how the hash is generated), and to have a compatible User Folder. however, if someone can point me to a good source of documentation about that, and some example code, I may want to give it a try again. regards, jephte.clain(a)univ-reunion.fr

1 0

ZMailman mailing list
by Stephan Richter 04 Dec '01

04 Dec '01

Hello everyone, I have setup a project page at http://demo.iuveno-net.de/iuveno/Products/ZMailman You can subscribe to the Mailing List there and also get to the CVS. I will give anyone who likes, write access to the CVS and/or the project page. Maybe someone who tried to get my ZMailman proof of concept going on his Zope install could write a how-to and put it on the site? Regards, Stephan -- Stephan Richter CBU - Physics and Chemistry Student Web2k - Web Design/Development & Technical Project Management

1 0

Re: [Zope-Coders] Zope 3; getting in on the act?
by Jim Fulton 04 Dec '01

04 Dec '01

Jim Fulton wrote: > > This is a quick note to let you all know we're glad you are paying attention. > I'm a little pressed for time right now, but I'll make a much fuller > response soon (no latr than Monday) with lots of information and suggestions > on ways to contribute. Well, Tres beat me to the punch a couple of days before I sent my note, but I hadn't caught up enough to see his message. :/ Hopefully, I'll be able to add a little something. We've created two new mailing lists: zope3-dev(a)zope.org, http://lists.zope.org/mailman/listinfo/zope3-dev, and zodb4-dev(a)python.org, http://mail.python.org/mailman/listinfo/zodb4-dev to discuss Zope3 and ZODB 4 (the next generation of ZODB, which will be used with Zope 3). As Tres pointed out, the main place to get information is the ComponentArchitecture Wiki: http://dev.zope.org/Wikis/DevSite/Projects/ComponentArchitecture There's a lot of good information there, although it's badly in need of updating, including responsing to comments. I'll try to get a good bit done this week. The Vision Statement at: http://dev.zope.org/Wikis/DevSite/Projects/ComponentArchitecture/VisionStat… describes the goals and, at a high level, the approach. See especially the "Proposed Solution" section. There are two reasons why the Wiki has been a bit neglected for the last few weeks: 1. I was focussed on a tutorial, aimed as Python programmers, that described, in a step-by-step detailed way, with an example, how to develop content and components for Zope3. The tutorial is available via CVS in the "Docs" area. You can browse it at: http://cvs.zope.org/Docs/ZopeComponentArchitecture/PythonProgrammerTutorial/ Note that: - Only Chapter 1 is (mostly) done. - The tutorial text is in the README.txt files. - The tutorial is arranged into chapters and the chapters are arranged into steps. The steps are executable Python packages. Step5 of chapter actually worked with the checked in Prototype code (see below) as of this writing. :) 2. When I reached a stable revision of the tutorial, we began working on an evolutionary (we hope) prototype of a future architecture necesary to run the tutorial. We still have a ways to go. While I was working on this document, Shane Hatheway posted an excellent summary and FAQ of some of the recent developmebnts: http://lists.zope.org/pipermail/zope-dev/2001-December/014313.html http://lists.zope.org/pipermail/zope-dev/2001-December/014318.html The first link above includes instructions for checking out the Zope 3x prototype. You can also browse the prototype code at: http://cvs.zope.org/Zope3/?only_with_tag=Zope-3x-branch We'd very much like community involvement at all levels. I encourage people to get involved. The mailing list and Wiki are a good place to start. Jim -- Jim Fulton mailto:jim@zope.com Python Powered! CTO (888) 344-4332 http://www.python.org Zope Corporation http://www.zope.com http://www.zope.org

1 0

Another open letter. :-)
by Lennart Regebro 03 Dec '01

03 Dec '01

After the discussion here I'm slowly starting to form a picture in my mind of how to "solve" the "problems". First some basic facts of life: - Zope corp needs to do what Zope corp thinks it can make money on. - "We" (that is the Zope community) need to get some features into the base of Zope because: a. It's not effective that we all solve the same problems independantly. b. Some features are hard to do as products. - It is imperative that there is a single point of control for Zope, ie no branching. This means Zope corp needs to control what goes into Zope, but the community needs to tell them what should go there, and the community has to help to put it in. To achieve this, we need better community support systems. That is, we need a proper community site, with discussion forums, a merged collector/proposal application with proper threaded discussions and applied workflow for proposal states. The projects that get started also need their protected areas on the site with discussion forums and their own CVS trees. In all, this would support a better inflow of comments from the community, it would make it easier for community members to see the responses to their input, and it would be easier to start projects with non ZC people involved in programming. Here are some things that I feel should be introduced into Zope: - Workflow support. (Because everybody needs it) - Versioning. (Because it's hard to do as a product) - Internationalization. (Because it's hard to do as a product) - Better user management. (Because everybody needs it) Also, Zope would benefit from the inclusion of several products that improve the products included in Zope. Many people have found some objects lacking in functionality, and added that functionality and put it up on Zope.org. Many of these improved products could easily replace the products that come with Zope today, thereby giving a better "wow" factor to Zope without much effort. I also feel there are things that could be removed. And now I'm gonna say bad things about parts of zope some people probably love, and they will hate me for this, but I'll have to live with that. This is my view only. I have on occasion been known to be completely wrong. :-) - Don't do any more work on ZClasses, and eventually drop it. To me they do not seem easier to work with than Python, they are messier and not as flexible. - I feel that CMF is a failure. It doesn't do what is promised, it's very hard to understand and many parts of it are simply designed so badly and incorrectly that they are practically useless. Drop CMF. Take the good parts and integrate them directly into the Zope base to make Zope a better platform form content management applications, and forget about the rest.

8 11

How to enhance Zope URI resolver to understand URNs?
by hnorris norris 03 Dec '01

03 Dec '01

(using friend's email, please reply to cstrong(a)arielpartners.com ) We are putting together a website using Zope. All of our content is stored in XML documents. The documents have links in them, some of which are specified using URNs. The cross links from one local document to another are specified using URNs instead of URLs so that the content remains context-agnostic. In this way, we can map the URN to different URLs depending on the particular Zope instance. We don't want the content to "know" about the particular layout of the ZODB, or even that it happens to be inside Zope at all! (some of our clients use Apache Cocoon, or some other technology) There are three ways I can think of for making this work: 1) Our XSLT transformer could reference a map somewhere and turn the URNs to URLs in the resulting HTML. 2) Our XSLT Transformer could leave the URNs alone, and the Zope URI Resolution mechanism could be enhanced with a lookup table that would map a URN to a URL. Of course, the resolver would be programmed in python with full access to the power of acquisition... [:-)] 3) We could use acquisition directly, but there are two drawbacks a) it still requires knowledge of the layout of the ZODB -- that is, if something is in a particular sub-branch, you might have to use several <dtml-with> statements to make it work. That violates separation of concerns. b) we then have to emulate acquisiton in non-Zope environments. Thoughts, anyone? TIA! --Craeg __________________________________________________ Do You Yahoo!? Buy the perfect holiday gifts at Yahoo! Shopping. http://shopping.yahoo.com

1 0