April 1999 - Zope - Zope lists

Using DTML - I'm too stupid
by Oliver Thuns 09 Apr '99

09 Apr '99

Hi! Could I use DocumentTemplate without Zope and ZPublisher. I want to creat some HTML-Pages with Python. How could I do something like print "<body>" x = ['abc', 'def', 'ghi'] for i in x: print "<p>blabla: " + i + "</p>" print "</body>" with DTML? I read the DTML User's Guide, but I'm too stupid to understand... ;-)

2 1

RE: [Zope] Object DB Capacity
by Paul Everitt 09 Apr '99

09 Apr '99

Craig wrote: > We are currently in the process of building a site with Zope that we > anticipate will have a large object database. We have some > concerns about > scalability as the database continues to grow. Does anybody understand the rules Outlook uses to determine wrapping? Absolutely mystifying. > What is the maximum capacity of the Zope object database? As Chris mentioned we have had some experience with large versions of the database. Two years ago this, well, this week I suppose, we started rolling out a classified ad engine for a consortium of newspapers. It used a predecessor of the current software, something one hop before "Principia". Basically it was a bunch of newspapers which could have a bunch (2,000-18,000) of ads. The ads were full-text indexed which created index objects that were also stored in the database. Lots of index object in fact. This allowed undo to return the ads _and_ the index back to its original state, so we also had multiple versions of the ads/indices. Anyway, using an older version of the technology, they're doing about a hundred papers with an average of a 1.5mil ads loaded/indexed per week. A year ago they were doing a million hits a day. At one point (around 50 papers) their database sizes were getting over a Gb. (We encouraged more aggressive packing at that point. Zope2 will go a long way towards making object storage more confidence-inspiring through (a) change in format and (b) allowing storage in "safe" managers such as an RDBMS or bsddb. > At what point > does performance begin to degrade? Obviously the Zope cache is extremely important. If it's working correctly and if your activity model matches something were a cache can help, then the cache can be quite useful. The size of the database is certainly a problem for database operations. Packing will obviously get a lot slower the bigger the size of the database (I guess in Zope2 packing will happen in the background). Doing a Find will be a nightmare if you have a billion objects. Otherwise, well, it depends on your activity model. Fortunately I have the benefit of seeing what we are working on now and realizing how it will help. Anybody that goes to LinuxExpo will see it as well :^) Namely, the Catalog will leverage the indexing structures that are a hidden part of Zope and used in Z Tables. Effectively all content in your Zope site can choose to be registered in the Catalog. Meaning the act of finding something on your site based on criteria (full-text search, date modified, keyword, category, author, etc.) will be effectively instantaneous. There's still a lot of hand-waving involved to get there but the hardest part (indexing) has been done for a while. > Is it possible to have multiple Zope servers, each with a subset of > objects, working together to "load balance"? How about multiple object > databases on one zope installation? Chris mentioned some ideas he has had about taking multiple storage layers and combining them into one object system. I'll talk a little bit about Zope2 which (knock on wood) will be in beta at LinuxExpo next month. Well, rather than talk about it, go to www.zope.org/News and search for ODB. That will give you a link to the design docs for the next version of the database. As for load balancing, here's our current party line on this. We aren't actively working on it. I personally don't feel there's a one-size-fits-all solution. Moreover, I don't particularly think people will take a free, off-the-shelf solution for load balancing and bet their business on it. Customization will always be necessary. Thus I think there will be multiple answers for multiple situations. I'd like to get a technology partner to help us fund the work on some basic building blocks. Then have Digital Creations and others have some "above the line" software/consulting to solve specific problems. Just my $0.02. --Paul

2 1

RE: [Zope] Has anyone tried authentication accross multiple serve rs?
by Jay, Dylan 09 Apr '99

09 Apr '99

> -----Original Message----- > From: Michel Pelletier [mailto:michel@digicool.com] > Sent: Thursday, 8 April 1999 23:36 > To: Phillip J. Eby; Jay, Dylan; 'zope(a)zope.org' > Subject: RE: [Zope] Has anyone tried authentication accross multiple > serve rs? > > > > > > -----Original Message----- > > From: Phillip J. Eby [mailto:pje@telecommunity.com] > > Sent: Wednesday, April 07, 1999 11:10 PM > > To: Jay, Dylan; 'zope(a)zope.org' > > Subject: Re: [Zope] Has anyone tried authentication accross multiple > > servers? > > > > > > At 11:29 AM 4/8/99 +1000, Jay, Dylan wrote: > > >I need this for a website I'm setting up so that users can > > download from > > >several different locations around the world. I don't want > > users to have to > > >type in their password twice. I presume there is no way to > > do this via basic > > >authentication which leaves cookies. Has anyone tried this? > > > > > > > I'm in the midst of figuring out how to do authentication > > with cookies. > > The only way I can see to get ZPublisher to work > > intelligently with cookies > > is to hack the "unauthorized" method of the ModulePublisher > > class so that a > > login page can be called. > > > > One caveat for your project: cookies will only work across > > servers if the > > servers share a common domain, e.g.: foo.bar.com and baz.bar.com. > > > > > > UserDb and etcUserFolder can both do cookie based > authentication. It's > not too tricky and kinda snazzy in that you can create your own > login/logout pages, etc. Check out the source of either > package for the > details. I've tried using cookie authentication with UserDB but so far can not get it to work. Everytime I try to login in it presents me with the normal basic authentication header. I believe this maybe something to do with permissions but so far can't figure it out. I am using IIS4 and have turned of basic authentication.

2 1

RE: [Zope] Has anyone tried authentication accross multiple serve rs?
by Brian Lloyd 09 Apr '99

09 Apr '99

> > I've tried using cookie authentication with UserDB but so far > can not get it > to work. Everytime I try to login in it presents me with the > normal basic > authentication header. I believe this maybe something to do > with permissions > but so far can't figure it out. I am using IIS4 and have > turned of basic > authentication. The first thing to do here is to make sure that it is really Zope causing the authentication challenge, or if it is IIS4. You need to have _all_ authentication off in IIS and permissions set to allow "everybody" to run the zope cgi. Can you log into Zope using the superuser name and password? If not, then IIS is attempting to handle authentication itself... Brian Lloyd brian(a)digicool.com Software Engineer 540.371.6909 Digital Creations http://www.digicool.com

1 0

Re: [Zope] Browsers & Backgrounds
by Robert OConnor 09 Apr '99

09 Apr '99

Thanks Chris, >Have you looked at the source being used by the browsers? ;-) Duh -- Use the source bob! It turns out that there were two (body background) tags in the source received by the browser. One is in the (standard_html_header) which I missed and the other was in the (index_html). I guess once IE4 sees the first (body b..) tag it ignores them later while NS45 makes changes for every tag it sees. -bobo connor bob(a)rocnet.com -----Original Message----- From: Christopher Petrilli <petrilli(a)amber.org> To: zope(a)zope.org <zope(a)zope.org> Date: Thursday, April 08, 1999 3:55 PM Subject: Re: [Zope] Browsers & Backgrounds >On Thu, Apr 08, 1999 at 03:28:06PM -0400, Robert OConnor wrote: >> I've tried renaming the file in the index_html and the file >> itself both from Netscape and IE 4. I've shut both browsers >> down and even redialed the ISP to get a new IP but >> the problem remains. >> >> Has anyone else seen this? >> Is there a way to capture the transactions between the >> browser and server to see what is going on? > >Have you looked at the source being used by the browsers? ;-) > >Chris >-- >| Christopher Petrilli ``Television is bubble-gum for >| petrilli(a)amber.org the mind.''-Frank Lloyd Wright >

2 1

Re: [Zope] UserDb/Authentication Questions
by Service Informatique CHSR 09 Apr '99

09 Apr '99

>Also, the way my site works, I would like to allow the user to >authenticate of their own accord, rather than wait until they try to I found that if you create a page wich define __name and __password, eg: **MyLoginPage** <form action=LoginSuccessfull method=post> <input type=text name=__name> <input type=text name=__password> <input type=submit> </form> **LoginSuccessfull** <p>You have logged in!</p> If __name and __password are correct, the user is automagically logged with that name and that password, and the LoginSuccessfull page is displayed. However, if the __name and the __password aren't correct, you get the unauthorized page. To Logout the user, MyLogoutPage expire the __ac cookie. However I didn't like these way of doing. So I wrote an exthernal method that compute an __ac value from two variables: name and password (not __name and __password, to avoid acl_users do the authentification itself), or return None if these are not correct. That way, if the result is not None, I set a cookie with name __ac and the value I got from the external method. You could write your own external method by looking at the source of UserDb.

1 0

Object DB Capacity
by Craig Villamor 09 Apr '99

09 Apr '99

We are currently in the process of building a site with Zope that we anticipate will have a large object database. We have some concerns about scalability as the database continues to grow. What is the maximum capacity of the Zope object database? At what point does performance begin to degrade? Is it possible to have multiple Zope servers, each with a subset of objects, working together to "load balance"? How about multiple object databases on one zope installation? Any help would be appreciated.

2 1

RE: [Zope] UserDb/Authentication Questions
by Jeffrey Shell 08 Apr '99

08 Apr '99

[SNIP!] > To facilitate this, I'd > like to put a > button on my main screen that says "Login" when the user is not > authenticated, and "Logout" when they are. I can make a link to > /company/acl_users/docLogin and /company/acl_users/docLogout > respectively, > but I figure there's a better, more Zopish way to do this. > Any ideas? I've > got the button part figured out (ie. I can easily change what > is shown on > the page based on whether they are logged in or not), I just > can't figure > out where to send them when they click it. *sigh* don't you love Outlook formatting? Anyways, I can't answer your other questions right offhand, but you can make a "logout" page very easily that doesn't even need to call the docLogout in the UserDB. Basically, you have to delete the cookie (which the default docLogout might not be doing in the current release). Using the following code effectively logs a user out when using cookie authentication.  Making an arbitrary "login" document is a little bit trickier. To ensure that the proper authentication is raised, make your own "docLogin" document that is protected (ie, Anonymous can't view it). This will raise the docLogin document in UserDB when the user clicks on it. You might want to do something like tracking the HTTP_REFERRER (REFERER?) header to return the user to the page they were on when they clicked the "login" link. You can even make your own form that mimics the docLogin form (submits the same parameters) whose action is a protected document. I've used this in a project where an unknown user needs to register, and part of that registration is a username and password. After they registered, they could enter the "members" area of the site and start working immediately, but I (a) wanted to keep that member area protected, and (b) didn't want to say to the user "Congratulations, now try out that new username and password by entering them again now!". Solution? I copied the <INPUT> tags from the UserDB docLogin form and changed their HTML type to "hidden" and set their value to the new username and password I had just acquired from the registration process, and set the target to the Member folder which required a Member role to View. It worked beautifully and gave me that resounding feeling of "mmm , Zope just kicks ass" (feelings of Zope kicking ass are of my personal opinion and does not necessarily reflect the views of Digital Creations. ;) .jPS

1 0

RE: [Zope] Whats the correct way...
by Michel Pelletier 08 Apr '99

08 Apr '99

> -----Original Message----- > From: raver(a)box.dust.za.net [mailto:raver@box.dust.za.net] > Sent: Monday, April 05, 1999 3:26 PM > To: zope(a)zope.org > Subject: [Zope] Whats the correct way... > > > Hi! > > First off all I want to apologize if this question is way off > topic here, > but I'm stuck and don't know where else to turn my question. > > Heres the situation: > > I've made a form to let people search a database where they > can choose wich > datafields is going to be shown in the result (this is done > by several > checkboxes). Now if I pass this forms data onto a ZSQLmethod that > handles the sql select query (variable names from the > checkboxes are handled > by ' - scentences') I end up with an error if > not all of the > checkboxes are checked out. > > What would be the correct way to have this handled? (Choose > what data to be > displayed) > You may find yourself in a situation where the attribute must exist in your DTML (and you want it to be a value or something else) but it may or may not be passed in by a calling form. To handle this, try:   ... (Then use data)   Here, if 'data' exists in REQUEST then it will override the default of ''. A rather sickening DTML construct like this is used in NotMail DTML in folder.dtml. Does this help? -Michel > Sture Lygren > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://www.zope.org/mailman/listinfo/zope > > (For developer-specific issues, use the companion list, > zope-dev(a)zope.org - http://www.zope.org/mailman/listinfo/zope-dev ) >

2 1

UserDb/Authentication Questions
by Jeff K. Hoffman 08 Apr '99

08 Apr '99

Hello everyone! I have been working on a site recently, and have come across a problem when using the UserDb product. Say I have a site as follows: + / + company - acl_users (UserDb) - index_html + events - index_html + members - index_html The data in the members folder is only accessible to users with the 'Members' role. The acl_users object, a UserDb instance contained in the company folder, contains login information for all the members of the site. When a user browses to /company/events/members, they get the login web form (I am using cookie-based auth.) The user logs in, and if all goes well, they arrive at the following URL: /company/events/members/events/members For some reason, UserDb or Zope is adding an extra events/members onto the URL. I can't figure out what I'm doing wrong. Also, the way my site works, I would like to allow the user to authenticate of their own accord, rather than wait until they try to access data they don't have permission to. This works better for a variety of reasons, on of which is because I can change the look of certain parts of the site based on their roles. To facilitate this, I'd like to put a button on my main screen that says "Login" when the user is not authenticated, and "Logout" when they are. I can make a link to /company/acl_users/docLogin and /company/acl_users/docLogout respectively, but I figure there's a better, more Zopish way to do this. Any ideas? I've got the button part figured out (ie. I can easily change what is shown on the page based on whether they are logged in or not), I just can't figure out where to send them when they click it. Any ideas? Thanks, jkh

1 0