March 2000 - Zope - Zope lists

How do I pass parms past a redirect?
by Garry Hodgson 23 Mar '00

23 Mar '00

i'm building an app that requires me to connect to another server in the company to do employee authentication. one connects to that site, passing a return URL. it verifies the employee, sets a cookie, and redirects to the URL you gave it. so, in a document i want to protect, say, ChangePerson.dtml, i've got something like: <dtml-if "REQUEST.cookies.has_key( 'attESSec' )"> ...regular actions for the page... <dtml-call "RESPONSE.expireCookie( 'attESSec' )"> <dtml-else> Missing attESSec cookie! <dtml-call "RESPONSE.redirect( 'http://othersite/cgi-bin/authenticate?retURL=http://mysite:8080/ChangePerso…' )"> </dtml-if> note that the URL i redirect to expects two parameters, retURL says where to return, and sysName is an application name given when i registered to use their services. so far, so good. the problem is, my document expects to be called with some parameters passed, like: <a href=ChangePerson?hrid=1234567&name=garry>Change</a> now, i can't encode these parameters in the retURL i pass the other site, as i get a "malformed syntax" error. so, my question is, how do i make this information available to my script on the return? do i set a variable in the container? set a cookie? or is there some better way? to broaden a bit, how does one pass information around in general? so far, i see several methods, for calling: External Method: piece of cake. real live arglists, like god intended. DMTL Doc from form: form variables, mixing hidden vars in for other stuff. HTML links: cgi-style syntax, leads to ugly URLs. is this the right way to do things, or am i missing something? -- Garry Hodgson Every night garry(a)sage.att.com a child is born Software Innovation Services is a Holy Night. AT&T Labs - Sophia Lyon Fahs

2 1

xmlrpc authentication woes
by Bill Anderson 23 Mar '00

23 Mar '00

First, let me say I have patched my xmlrpclib.py to support authentication; that isn't the problem. Overview: I have a folder, 'Administration', which requires manager login to access. In this folder is a subfolder called 'MachineTracker'. In this folder is a collection of ZSQl Methods, DTML Methods, and DTML Documents. What I want to do is to connect to the server via XML-RPC, and make use of the ZSQL Method for inserting data into the database. Problem: When attempting this from python in XML-RPC, I get a 401 Unauthorized error. I can access the folder, and other methods, such as index_html() and objectIds() with no authentication issues. Any ideas? (please cc me here, this isn't my subscribed address) TIA, Bill -- Bill Anderson Linux/Unix Administrator, Security Analyst ESBU (ARC) bill_anderson(a)boi.hp.com My opinions are just that; _my_ opinions.

1 0

Zope archives gone
by Jimmie Houchin 23 Mar '00

23 Mar '00

Hello, I went to the Zope mailing list archives to download one of the monthly files and find they are all gone except March and March is only 28k. http://lists.zope.org/pipermail/zope/ Just thought I would let someone know. Jimmie Houchin

1 0

Troubles with SQL queries
by jeffr＠odeon.net 23 Mar '00

23 Mar '00

Heya folks, I've got an SQL query that looks like the following: select artists.hidden_URL,gigs.* from artists,gigs where artists.name=gigs.name and gigs.date >= "<dtml-call "REQUEST.set / ('CurrentDate',ZopeTime().Date())"> / <dtml-var "REQUEST.CurrentDate">" order by gigs.date, gigs.start_time This works fine. The '/'s indicate that a single line continues, in the ZSQL method the 'and gigs.date >= etc." part is on one line. I'd link to be able to change the values the query is ordered by based on the link used to access it. Something like the following: http://foo.bar.com/Zope/query?first=date&second=start_time Towards that end I made the above look like: select artists.hidden_URL,gigs.* from artists,gigs where artists.name=gigs.name and gigs.date >= "<dtml-call "REQUEST.set / ('CurrentDate',ZopeTime().Date())"> / <dtml-var "REQUEST.CurrentDate">" order by gigs.<dtml-sqlvar first type=string>, / gigs.<dtml-sqlvar second type=string> When I test the ZSQL method it shows the SQL used as: select artists.hidden_URL,gigs.* from artists,gigs where artists.name=gigs.name and gigs.date >= "2000/03/23" order by gigs.'date', gigs.'start_time' Note the 'date' and 'start_time'... Because of the 's the query does not work. Is there a way to not have the <dtml-sqlvar> tag return the 's to MySQL, or is there another way I should be trying to do this? Thanks for the help, Jeff Robertson

1 1

Re: [Zope] authentication & mod_rewrite troubles
by david harris 23 Mar '00

23 Mar '00

thanks for the input michel it gave me a better understanding of what was going on, BUT it still doesnt work! argh. My httpd.conf now says: " <VirtualHost www.test.net> ServerAdmin webmaster(a)www.test.net #dont need a document root for Zope # DocumentRoot "/windows/My Documents/Web sites/www.test.net" #so use a null one - not the apache default # DocumentRoot '' ServerName www.test.net ErrorLog /usr/local/httpd/cgi-bin/www.test.net_log CustomLog /usr/local/httpd/cgi-bin/www.test.net_log common #Added by David - Palmer admin #<Confidence low> # Zope configuration maps /Zope/ to the Zope.cgi CGI script #ScriptAlias /cgi-bin/ /usr/local/httpd/cgi-bin/ RewriteEngine on RewriteLog /usr/local/httpd/cgi-bin/zap_rewrite_log RewriteLogLevel 9 RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^/Zope/(.*) /usr/local/httpd/cgi-bin/Zope.cgi/$1 [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] #</confidence> </VirtualHost> " the rewrite log says: " 82c][rid#80eceb4/initial] (2) init rewrite engine with requested uri /Zope/manage 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [rid#80eceb4/initial] (3) applying pattern '^/Zope/(.*)' to uri '/Zope/manage' [www.test.net/sid#80e182c][rid#80eceb4/initial] (4) RewriteCond: input='' pattern='^(.*)' => matched 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (2) rewrite /Zope/manage -> /usr/local/httpd/cgi-bin/Zope.cgi/manage 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (5) setting env variable 'HTTP_CGI_AUTHORIZATION' to '' 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (2) remember /usr/local/httpd/cgi-bin/Zope.cgi/manage to have MIME-type 'application/x-httpd-cgi' 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (2) local path result: /usr/local/httpd/cgi-bin/Zope.cgi/manage 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (1) go-ahead with /usr/local/httpd/cgi-bin/Zope.cgi/manage [OK] 192.168.0.2 - - [15/Mar/2000:19:16:51 +0000] [www.test.net/sid#80e182c][rid#80eceb4/initial] (1) force filename /usr/local/httpd/cgi-bin/Zope.cgi to have MIME-type 'application/x-httpd-cgi' again Im not sure what the 'force filename' bit mean and whether "setting env variable 'HTTP_CGI_AUTHORIZATION' to '' " looks right? Now I just get "You don't have permission to access /Zope/home on this server." no login prompts start screens or anything. Is there anyway of debugging the interaction between Zope and Apache rewrite? Thanks David "desperate to avoid PHP :)"

2 1

RE: [Zope] Personalization strategies. And just what does Broadvi sion do ?
by Paul Everitt 23 Mar '00

23 Mar '00

Chas wrote: > Just wondering if anyone has thought about personalization > services based on Zope ? PTK. > The most obvious/traditional approach seems to be : > 1. Acquire user information (via > forms/surveys/transaction-histories etc) > and store in RDB. > 2. When the user comes to the site (and either logs in or is > identified > by IP or cookie), query the RDB for customized content or > appropriate > products. > > OK, no magic there. But it's not very scalable in terms of : > a) Load. We can keep shoving Zope servers on the front end > but the RDB is going to get hammered if this has to occur > for each and every request. This isn't necessarily true. Zope caches objects, and the scenario you describe is well suited to the caching strategy. (That is, a user is probably going to come back again within a minute of their previous request.) Compare this to an RDBMS strategy where state is always being retrieved on each request. > b) Development. A more object-oriented approach would be nicer. > eg. Personalities with behaviours and properties. > Could a pool of persistent personalities be left floating > around ? (No, this is not an early April's fool) The PTK membership model allows arbitrary extension of methods and attributes. --Paul

2 1

RE: [Zope] Zope enterprise goes open source?
by Paul Everitt 23 Mar '00

23 Mar '00

> -----Original Message----- > From: Chris Withers [mailto:chrisw@nipltd.com] > Sent: Thursday, March 23, 2000 6:24 AM > To: Martijn Pieters > Cc: Zope Mailing List > Subject: Re: [Zope] Zope enterprise goes open source? > > > > The URL on ZEO is: > > > > http://www.zope.org/Products/ZEO/ > > > > To be fair, there's not really a lot there... > > I think everyone wants to know how to get onto the mid-april > testing program! ;-) Sorry, I forgot that I hadn't uploaded the text of the FAQ. My network connection was horrible yesterday (I'm in a hotel in the Bay Area right now). I'll upload it in a moment. --Paul

1 0

RE: [Zope] ZEO beta qualifications
by Paul Everitt 23 Mar '00

23 Mar '00

As much as I appreciate the desire to get at ZEO early, we have to balance that with our limited resources internally. We're taking a conservative approach to getting it out the door, rather than just dumping code and telling people they're on their own. Hopefully everyone can appreciate this. Unfortunately we're taking a lot of flak, for instance, for not releasing Tracker. I wish we had unlimited resources, but that's just not the case. As everyone in the Zope community will probably agree, we need to do a better job and not a bigger job. --Paul > -----Original Message----- > From: Jimmie Houchin [mailto:jhouchin@texoma.net] > Sent: Thursday, March 23, 2000 12:35 PM > To: zope(a)zope.org > Subject: [Zope] ZEO beta qualifications > > > This was also posted to the ZEO/ZWiki at > http://www.zope.org/Products/ZEO/Wiki/FrontPage > > Would there be any potential for allowing people who are doing > development only, not deployment stage, into the beta > program? Using ZEO > could change the way I design the app. At least this is a thought from > what I read in the description. > > I am very interested in learning the ZEO architecture and capabilities > but am only in a development phase. In other words, I will not be > offended by crashing or data corruption as I am in total > control of the > system, access and backups, etc. I thoroughly understand this > is a work > in progress. > > Just a thought. > > Jimmie Houchin. > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

ZLDAPMethods problem/solution
by Wade Simmons 23 Mar '00

23 Mar '00

I'm using ZopeLDAP v. 1.0b1 The LDAP filter methods stopped working after upgrading to Zope 2.1.6 I changed line 259 in LM.py from: f=apply(f, (p,), argdata) to: f=apply(f, (p, argdata)) This seems to have solved the problem. Can anyone see a problem with this fix or a better solution? - Wade

1 0

ZEO beta qualifications
by Jimmie Houchin 23 Mar '00

23 Mar '00

This was also posted to the ZEO/ZWiki at http://www.zope.org/Products/ZEO/Wiki/FrontPage Would there be any potential for allowing people who are doing development only, not deployment stage, into the beta program? Using ZEO could change the way I design the app. At least this is a thought from what I read in the description. I am very interested in learning the ZEO architecture and capabilities but am only in a development phase. In other words, I will not be offended by crashing or data corruption as I am in total control of the system, access and backups, etc. I thoroughly understand this is a work in progress. Just a thought. Jimmie Houchin.

1 0