- Zope-Dev - Zope lists

Object permission?
by Ng Pheng Siong 26 Apr '00

26 Apr '00

Hello, Me again. I'm designing an S/MIME product which will allow Zope to generate S/MIME-signed/encrypted mail via a "<dtml-smime>" tag. As designed, <dtml-smime> expects, as a parameter, an Smime object created previously. This is similar to <dtml-sendmail>'s use of an existing MailHost object. Associated with each said Smime object is a signer's private key and a bunch of recipient certificates. These are text files uploaded by the creator of the Smime object. The signer key and recipient certificates should not be "readable" via browser by unauthorised users, for obvious reasons. However, the <dtml-smime> machinery, operating under whatever Zope user id is invoking it, should be able to "read" them, in order to do its S/MIME business. First questions: - What permissions do I give to the uploaded key and certificates objects? - What is the difference between "access contents information" and "view"? - How do I assign permissions programmatically? TIA. Cheers. -- Ng Pheng Siong <ngps(a)post1.com> * http://www.post1.com/home/ngps

1 0

REMOTE_USER
by Ng Pheng Siong 26 Apr '00

26 Apr '00

Hello, I've been testing my ZServerSSL in X.509 authentication mode. A quick recap of how it works: ZServerSSL extracts the cert's identity (its subject DN), maps it to a Zope user name, and sets REMOTE_USER accordingly. As it happens, if mapping fails (user cert verifies ok but mapping doesn't exist), REMOTE_USER is unset and Zope will pop up its Basic Authentication dialog box. Because Zope is now running in REMOTE_USER mode, this step always fails. I tested with setting REMOTE_USER to "anonymous": same outcome. What do Zope hackers think is the appropriate course of action here? TIA. Cheers. -- Ng Pheng Siong <ngps(a)post1.com> * http://www.post1.com/home/ngps

1 0

[ANNOUNCE] ZServerSSL 0.04
by Ng Pheng Siong 26 Apr '00

26 Apr '00

Hello, I am pleased to announce the release of ZServerSSL 0.04. ZServerSSL provides a HTTPS server for Zope. In normal operation, ZServerSSL protects user names, passwords and data in transit against eavesdropping. This release of ZServerSSL presents a significant enhancement: X.509 certificate-based authentication for Zope. In this mode, Zope is run in "remote user" mode, and ZServerSSL's HTTPS server is configured to *require* user certificates. When a user connects, ZServerSSL handles certificate verification, maps the user certificate's "subject distinguished name" to a Zope username and sets REMOTE_USER accordingly. Zope's REMOTE_USER machinery takes care of the rest. Given valid user certificates and mappings from certificates to Zope users, Zope no longer requires passwords for access. This improves site security by removing the need to store passwords on the Zope site. This mode of operation can be adapted to other HTTPS servers like Apache+SSL, Roxen+SSL, etc. that perform certificate-based authentication. ZServerSSL is bundled with the latest snapshot of M2Crypto, and is also available as a separate package. It can be downloaded from here: http://www.post1.com/home/ngps/m2 Usual disclaimers apply. Feedback is very much appreciated. Cheers. -- Ng Pheng Siong <ngps(a)post1.com> * http://www.post1.com/home/ngps (BTW, what's this about no cross-posting btw zope-dev and zope?)

2 2

How use ZpdfDocument?
by Juan Javier Carrera Obrero 26 Apr '00

26 Apr '00

Hello, Anybody know to how use the ZpdfDocument ? What are the tags to use ? Can a image be introduced in a ZpdfDocument?. How do it? Thanks. ----------- JUAN JAVIER CARRERA OBRERO e-mail: jcarrera(a)uco.es

1 0

Re: Zope-Dev digest, Vol 1 #484 - 14 msgs
by Juan Javier Carrera Obrero 26 Apr '00

26 Apr '00

Hello, Anybody know to how use the ZpdfDocument ? What are the tags to use ? Can a image be introduced in a ZpdfDocument?. How do it? Thanks. ----------- JUAN JAVIER CARRERA OBRERO e-mail: jcarrera(a)uco.es

1 0

Final on the Zope spin out
by Jason Spisak 25 Apr '00

25 Apr '00

This is weird. The following code flips Zope out until you kill the thread that picked up the request. <dtml-in "_.range(0, 105, 5)"> <option value="<dtml-var "_.float(_['sequence-item'])/100">"> <dtml-var "_.float(_['sequence-item'])">% </option> </dtml-in> But this code renders fine swear to God: <dtml-in "_.range(0, 105, 5)"> <option value="<dtml-var "_.float(_['sequence-item'])/100">"> <dtml-var "_.float(_['sequence-item'])">% </option> </dtml-in> Notice the <option> tags flush left. Please tell me someone can reproduce this. My base ZClass subclasses nothing. I experience the hang with both the ZClass management and viewing below and instance. -- Jason Spisak 444(a)hiretechs.com

3 3

ADO Database Connections
by Theodore Patrick 25 Apr '00

25 Apr '00

Has anyone done any work in making database connections via ADO/OLEDB or JDBC in JAVA? I do not know what would be involved but there has been allot of work in this area from a performance standpoint. Both JDBC and ADO are widely supported on many platforms and both provide native database functionality via native drivers. Is there a way for ZOPE to utilize ADO/OLDB or JDBC via a python component (maybe implemented as LOCAL STORAGE(ZEO))? Is there a way to provide Database Connection Pooling (add/remove DB connections based on application usage?) Lack of support for Native database functionality in ZOPE is a major drawback and getting every DB vendor to code Python Drivers for ZOPE doesn't seem reasonable from a maintenance standpoint on both sides of the coin(developer/database manufacturer). Coding a DB connection manager to an "DB DRIVER standard"(I use the term loosely) would provide better long term support and flexibility. Any thoughts? Thanks in advance. Theodore E. Patrick Indigo Networks - Ishophere.com

1 0

Found what caused Zope to spin out
by Jason Spisak 25 Apr '00

25 Apr '00

Zopists, <dtml-in "_.range(0, 105, 5)"> <option value="<dtml-var "_.float(_['sequence-item'])/100">"> <dtml-var "_.float(_['sequence-item'])">% </option> </dtml-in> This code when viewed from a ZClass management interface in 2.1.6 crashes my Zope everytime. Any ideas? All my best, -- Jason Spisak 444(a)hiretechs.com

1 0

Zope Spun out
by Jason Spisak 25 Apr '00

25 Apr '00

I ran strace on each thread and all of them gave me back my command line except two. One of them doesn't give me back the prompt, it just hangs there with "about to attach 4bfb", the other doesn't give me pabk the prompt with: about to attach 4af3 wait4(19451, which is consequently the other process that hangs my prompt. Neither of these were the process that spiked. Any ideas where to go from here. It's still hung? -- Jason Spisak 444(a)hiretechs.com

1 0

Zope spun out
by Jason Spisak 25 Apr '00

25 Apr '00

BTW I run strace on that process and it gave me "about to attach 4c02" and that's it. When I ran the strace, the process stopped gobbling CPU. But Zope is still unresponsive. -- Jason Spisak 444(a)hiretechs.com

1 0