October 2000 - Zope - Zope lists

RE: [Zope] How to render a HTMLFile in a method in a product
by Max Møller Rasmussen 06 Nov '00

06 Nov '00

From: Chris Withers [mailto:chrisw@nipltd.com] Thanks for the reply >testisDocTemp = 1 >def test(self,ignored,md): > " A simple test method " > return HTMLFile('skins/' + self.skin, globals())(None,md) Is this documented anywhere? I have a little trouble using code I don't understand. Pretty Please. Regards Max M

2 1

IIS and Zope share same problem :-S
by Chris Withers 06 Nov '00

06 Nov '00

> MICROSOFT WEBSERVERS LAID OPEN FOR ALL TO SEE > by Dave Murphy, member(a)itrain.org > > Microsoft is scrambling to repair damage caused by a > security hole in its IIS 4 & 5 webserver that runs on > Windows NT/2000. Microsoft claims over four million > IIS websites, and each one of them is at risk of > releasing sensitive data through the security hole. > Called the "Web Server Folder Traversal" error, the > flaw allows users to execute files on an IIS website by > requesting a specific web address. http://www.zope.org/standard_html_header for example ;-) http://www.zope.org/objectIds as another... > The bug allows access to any file on the webserver via > a specified URL. Like all webservers, IIS is supposed > to prevent access to files that aren't intended to be > part of the website. Maybe Zope should too.... > This article is posted to http://itrain.org/itinfo/2000/it001017.html > > Live well, do good, > > --Dave Murphy cheers, Chris

6 7

New kinds of problems
by MANUEL JOSE AMADOR BRIZ 04 Nov '00

04 Nov '00

Thanks, here are my two cents: Mini quick howto to connect to a sybase ASA/ASE: Get any 2.2 linux distro installed, except red hat 7 (compiler problems, it WILL fail). GET from Sybase the RPMs called sybase-common and sybase-openclient, the latest versions. Install them. do a link from /opt/sybase to /opt/sybase- {currentversion} which should exist now. make sure you have $SYBASE set in your profile, to /opt/sybase. Download zope-2.2.2.src.tgz untar as root, then chown -R root.root /path/to/Zopefolder make sure you have python and python-devel RPMs or DEBs. cd to zope folder run \\\'python w_pcgi.py\\\' run \\\'python zpasswd.py access\\\', enter username, password, CLEARTEXT encoding and no domain get ZSybaseDAv2 b2 and place the targz file into the zope folder do a \\\'tar zxvmf ZSybaseDAv2.tar.gz0 in the zope folder Once more do a chown -R root.root * cd into lib/python/Products/ZSybaseDAv2/src cp Setup.linux or Setup.solaris to Setup make -f Makefile.pre.in boot make cd to the parent folder (cd ..) cp src/sy_occ.so . enter python and try to do \\\'import sy_occ\\\' if it works and doesn\\\'t spit errors, you\\\'re set. exit python and go to the zope folder, then run ./start if zope starts, you\\\'re all set now there is an executable called /opt/sybase/bin/dsedit that you will have to use to create network transports. Fill in the appropriate data. Now for the problems. I managed to connect to an ASA 7.0 database, and retrieved successfully a select * from systable, but can\\\'t execute stored procedures, it spits some kind of another operation on progress error or unknown data type returned error. I assume ASA and dsclient are talking incompatible protocols here. Can someone help me? By the way, the data source created with dsedit for our ASE server works fine. Everything runs OK. Please reply and CC: me because I\\\'m kinda lagged behind with the mailing list and I need a reply soon. Thanks. I hope these instructions help people in connecting to Sybase, given the poor support they have in some countries (I\\\'m thinking mine). Manuel ---------------------------------------------------------- Universidad Federico Santa Maria - Campus Guayaquil Enviado por: www.usm.edu.ec

3 3

problem installing login manager
by Henny van der Linde 03 Nov '00

03 Nov '00

Hi, I just installed Zope 2.2.2 and tried to install the latest version of Login Manager. It failed: LoginManager Import Traceback Traceback (innermost last): File "C:\Program Files\WebSite22\lib\python\OFS\Application.py", line 397, in import_products product=__import__(pname, global_dict, global_dict, silly) File "C:\Program Files\WebSite22\lib\python\Products\LoginManager\__init__.py", line 1, in ? import LoginManager, LoginMethods, UserSources File "C:\Program Files\WebSite22\lib\python\Products\LoginManager\LoginManager.py", line 8, in ? from Products.ZPatterns.Specialists import Specialist File "C:\Program Files\WebSite22\lib\python\Products\ZPatterns\__init__.py", line 1, in ? import Rack, Specialists, Customizers, AttributeProviders, SheetProviders File "C:\Program Files\WebSite22\lib\python\Products\ZPatterns\Rack.py", line 9, in ? from DataSkins import DataSkin File "C:\Program Files\WebSite22\lib\python\Products\ZPatterns\DataSkins.py", line 1, in ? from DynPersist import DynPersist ImportError: No module named DynPersist What 's happening? Thanks Henny van der Linde

3 3

pluggable brains
by Philipp Auersperg 03 Nov '00

03 Nov '00

For ZSQL Methods it is possible to bind a ZClass to the records. These can be selected from te combo box labeled 'ZClass' in the 'advanced' tab of the SQLMethod's management screen, but there is always listed just one ZClass. My question: Why is there just one ZClass selectable, even if there are many ZClasses defined? Is that a bug or a feature? thanks phil

2 2

Zope and Python 2.0
by Xavier Defrang 02 Nov '00

02 Nov '00

Hi folks, I've just downloaded Zope source code to rebuild it on a FreeBSD-4.1 box. Is Zope-2.2.2 so tightly coupled to Python-1.5.2 that It doesn't run with Python 2.0... I've got a system-wide installation of Python 2.0 and the ./start scripts fails. I made a local installtion of Python 1.5.2 just to run Zope. I changed the path the Python interpreter in the start shell script but it looks like Medusa's asyncore.py can't find tjhe FCNTL module... What the hell is going wrong? I also had to comment out a nasty #include "mymath.h" in 'lib/Components/cPickle/cPickle.c' to get it built properly... - Xavier

3 2

How small a box can zope run on?
by Alexander Limi 02 Nov '00

02 Nov '00

Hi, Just a quick question: We are building some device controller software and to control those we have a normal 486 with 24MB RAM running linux. Has anybody tried running zope on such a modest setup? There is only going to be one or two users connected to Zope at once, so we don't need much performance in terms of page views per second :) Cheers, Alexander.

6 7

Zope & python 2
by Mark Twiddy 02 Nov '00

02 Nov '00

Hi all Is anyone using or know the current state of Zope with python 2.0 ? Thanks Joe

3 4

RE: [Zope] preventing acquisition
by Farrell, Troy 02 Nov '00

02 Nov '00

Sorry. -2 points for lack of clarity (my fault) I thought you were talking about a document. If you want to do something like that you will need to use <dtml-with> inside your documents. The only way I know to prevent a user from doing this by typing a URL is to set some security permissions. You might look at http://www.zope.org/Members/rossl/SpecificContext It is not specific to your problem, but it might help. Troy -----Original Message----- From: Robin Becker [mailto:robin@jessikat.fsnet.co.uk] Sent: Tuesday, October 31, 2000 2:52 PM To: Farrell, Troy Cc: Zope(a)zope.org Subject: Re: [Zope] preventing acquisition In message <DB56BAD3BFCED3119D3100D0B72386560713C41A(a)wcgtule103.wcg.will iams.com>, Farrell, Troy <troy.farrell(a)wilcom.com> writes >Sorry for the blank. That was my mistake. Try the <dtml-with> tag and the >"only" keyword. ... It's quite difficult to get netscape/ie to do a <dtml-with only>! The problem I'm seeing is that in my browser I can use http://localhost/A/B/C correctly, but also incorrectly I can view http://localhost/A/B/C/A/C -- Robin Becker

2 1

incorporating generated sub-websites within a Zope site
by Fred Yankowski 02 Nov '00

02 Nov '00

I'm looking for suggestions about how to manage a Zope website that hosts some subsites created by tools outside of Zope. Here's the situation. I'm working on a community website (batavians.org) for a small city (Batavia, IL) where I want to allow various non-profit community organizations to manage their own subsites. But the very first test case is proving to be a problem because the manager of the subsite is using web page development tools that seem to make it hard to integrate their subsite with the rest of the site. They can FTP their files up to the Zope server (which I configured to use port 21 for FTP) and their work is accessible just fine given a small "glue" index_html object that bridges to their internal main page. But I got blocked when I tried to add a standard page footer onto their pages. Actually, I was able to add a dtml-var element to pull in a standard footer via acquisition and that works, but the manager of the sub-website has no way to pull that change back to her working version of the subsite. It seems that the lightweight "Web Studio 2.0" tool she's using has no FTP-download function at all. Not only that, it has no way to view/edit HTML at all! It's only possible to edit using a WYSIWYG design view (AFAICT). So she can't merge in the change even if I tell her exactly the HTML code to add. OK, this problem is largely the result of the crappy web-design tool she's using, but I really have no control over that. The subsite manage/author doesn't know HTML and would be completely helpless with Zope's "through the web" editing interface. A better tool such as Dreamweaver would at least allow her to download files and/or edit HTML directly, but that's moot in this case. Even with Dreamweaver I think the DTML tags would be invisible and hard for a non-programmer to deal with. (Not only that, Dreamweaver refuses to open files that don't have an extension, so it won't open index_html for example.) So what alternatives do I have? Is there some way that I can set up a filter such that every page of her subsite goes through the filter before being sent out to the browser, allowing me to tack on a page footer on those pages? I'm sure Zope has such a mechanism, but I don't know where to look. Even with such a filter I'm not keen about having to parse her pages (which are/should-be each a complete HTML document) in order to insert a footer line in the right place. What other schemes should I consider? -- Fred Yankowski fred(a)OntoSys.com tel: +1.630.879.1312 Principal Consultant www.OntoSys.com fax: +1.630.879.1370 OntoSys, Inc 38W242 Deerpath Rd, Batavia, IL 60510, USA

2 1