May 2001 - Zope - Zope lists

(no subject)
by Peter de Jong 14 May '01

14 May '01

I get the following message: 2001-05-14T15:39:40 ERROR(200) ZServer uncaptured python exception, closing channel <select-trigger (pipe) at 81fad8c> (exceptions.OSError:[Errno 11] Resource temporarily unavailable [/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/medusa/asyncore.py|poll|75] [/usr/src/packages/BUILD/Zope-2.2.2- src/ZServer/medusa/asyncore.py|handle_read_event|327] [/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/medusa/select_trigger.py|handle_read|77] [/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/medusa/asyncore.py|recv|279] [/usr/src/packages/BUILD/Zope-2.2.2- src/ZServer/medusa/asyncore.py|recv|467]) Unhandled exception in thread: Traceback (most recent call last): File "/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/PubCore/ZServerPublisher.py", line 97, in __init__ File "/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/HTTPResponse.py", line 298, in _finish File "/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/HTTPResponse.py", line 341, in close File "/usr/src/packages/BUILD/Zope-2.2.2-src/ZServer/medusa/select_trigger.py", line 74, in pull_trigger OSError: [Errno 32] Broken pipe Maybe there is something I did wrong. Peter de Jong

2 1

Summary: Webdav security(hole?)question.
by Antwan Reijnen 14 May '01

14 May '01

Hi All, Chris (suspicious), Tim (FreePM), Joachim (Explorere remembers password), Thanks for contributions on the WebDAV thread. I digged a little into it, and I can now shamefully say that my observations on WebDAV were not completely correct (blush). So here is my summary: Thanks to Chris and Tim, I re-examined the security-policy of my Zopeserver. And was very surprized to see that the access contents information permission was default assigned to role anonymous. I changed this immediately. This put me in the wrong direction: after changing my manager-passwordt, I could still browse through my Zope-site with WebFolder, without being asked for a new password. I understand this now... I changed from manager to anonymous from the perspective of the WebFolder, and anonymous could browse through the system. Because I saw no change in behaviour on the WebFolder side, I thought nothing had changed. But it did: I could'nt write or change files anymore: here the long awaited username/password dialog finally showed up. Phew... sorry about this, I should have examined this more carefully... My preliminary false conclusion was by the way supported by the fact that the first windows2000 site I tried to access via WebDAV was completely open (yes, with write supported), no password required... Chris and Tim: I agree completely with you that the securitypolicy via WebDAV should be the same as via the http methods. Tim: of course, I could not gain access to FreePM ;-) Joachim: thanks to your email I understand why my new Zope installation (2.3.1 -> 2.3.2) did not require new authentication via WebDAV. Thanks Bill :-( So: thank you all very much. I will creep back in my hole, and go shame myself :-) Goodbey! Greetings, Antwan. >Hi All, > >I have a weird security problem with my Zope installation. I'm now running >Zope 2.3.2 on Windows98, but the problem also occurred in Zope 2.3.1. > >I installed a Webfolder in my explorer, to gain access via Webdav to the >Zope Server. It did'nt require a username/password to gain full access to >the server... I tried to change my password from within Zope, but that >did'nt change a thing... I can walk in, without authentication needed...! > >I was worried about this, so I decided to test Webdav on some >Windows2000/IIS5 servers on internet too, to see if they required >authentication. And a shocking 1 out of 4 servers I tried, where >completely open to Webdav... I could retrieve directory listings, and I >also had WRITE privileges. Some very important, large websites contain >this accesshole. > >How is this possible???? How can I fix this hole in my Zope installation? >Can I disable Webdav access completely, if there is no short term solution? > >Any help is greatly appreciated. > >Thanks in advance, greetings, Antwan Reijnen.

2 1

Starting with Iemethod
by H.de.Wit＠SFK.NL 14 May '01

14 May '01

Some e-mail before: >> WYSIWYG HTML applets to get rid of the textareas for HTML input? >Yes, there is the Johanc's IEMethod Product, that works only for IE5.0 >http://www.zope.org/Members/johanc/IEMethod/IEMethod/ >Ausum Curiously, i downloaded the product and followed the installation instructions below, but at step 4 there was no IEMethod. Is anybody using this product and share some advice? 1 Unpack the TorpedSharedModule.tgz in the Zope Shared Modules directory. E.g. lib/python/Shared/ 2 Unpack the IEMethod-0.0.6.tgz in the Zope root directory. 3 Restart Zope. 4 Create a IEMethod instance. 5 The IEMethod is subclassed from DTML Method so it should act exactly as a DTML Method. 6 The IE Method has a management tab called Editor, besides the ones equal to DTML Methods. Notice that this only works if your using Internet Explorer 5. etc. Met vriendelijke groeten, Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445

2 1

Re: [Zope] Zcatalog query
by Sebal 14 May '01

14 May '01

Thanx I finally found the good syntax : -> numero_doc is a 'field index' in the catalog and a 'string' in the property sheet of MyZclass (with CatalogAware) -> I don't use a stored query [as asked Arno Gross] it was <dtml-in "Catalog({'numero_doc':'thedoc'})"> and not <dtml-in "Catalog({'numero_doc','thedoc'})"> () / \ | <> | (____) zazen rules ... _______________________________________________________ Send a cool gift with your E-Card http://www.bluemountain.com/giftcenter/

1 0

RE: [Zope] In Ref to: Permissions Problem
by Farrell, Troy 14 May '01

14 May '01

Have you closed and reopened your browser? Can you try it with a different version or different browser. Certain versions of IE have authentication problems. -----Original Message----- From: Rahsheen Porter [mailto:cipher_atl@yahoo.com] Sent: Monday, May 14, 2001 2:33 PM To: zope(a)zope.org Subject: RE: [Zope] In Ref to: Permissions Problem Already Done. I have Anon Access for: Access Contents Information Search ZCatalog Use Database Methods View At the root level, yet I cannot view any objects at this level or any below it. --- "Farrell, Troy" <troy.farrell(a)wcg.com> wrote: > Give Anon permission to "Access Contents > Information". > > That should fix it. > > -----Original Message----- > From: Rahsheen Porter [mailto:cipher_atl@yahoo.com] > Sent: Monday, May 14, 2001 2:21 PM > To: zope(a)zope.org > Subject: RE: [Zope] In Ref to: Permissions Problem > > > > --- "Farrell, Troy" <troy.farrell(a)wcg.com> wrote: > > Well, Rahsheen, what did you do to bring zope to > > this state? Is zope > > running behind Apache or a different proxy? Do > you > > still have an acl_users > > folder in the Zope root? What are the current > > permissions settings for the > > root folder? > > Please give us more to work with than, "everything > > is all broke." > > I was running behind Apache, but got rid of that so > clear things up a little. There is a Zope root > acl_users with 2 manager accounts. The root folder > is > set up for the Manager to do everything, Anonymous > can > only view things, and Owner does nothing. I can do > anything I want to the site except View the content. > It prompts for a password, but will always deny > access > no matter what account I use. Anon access no longer > exists... > > __________________________________________________ > Do You Yahoo!? > Yahoo! Auctions - buy the things you want at great > prices > http://auctions.yahoo.com/ > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) __________________________________________________ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

3 2

Re: [Zope] Starting with Iemethod
by H.de.Wit＠SFK.NL 14 May '01

14 May '01

Thank you Tino, >look at the Control_Panel/Products >tab if there is a broken IEDTMLMethod >product. If you klick on it you should >see the traceback it might have produced. This is the error trace i get Traceback (innermost last): File "C:\PROGRA~1\ZOPE\lib\python\OFS\Application.py", line 528, in import_products product=__import__(pname, global_dict, global_dict, silly) File "/bigshare/zopeservers/easypublishing/Products/IEMethod/__init__.py", line 41, in ? File "/bigshare/zopeservers/easypublishing/Products/IEMethod/IEMethod.py", line 49, in ? ImportError: No module named Torped.HTMLEntity It seems that the Torped module is not installed correctly, although i did it exactly according to the instructions. The product consist of two parts: Iemethod, installed in c:\program files\zope\IEMethod and Torped in c:\program files\zope\lib\python\shared\Torped I tried to run it also from the products directory, but that didn't help, and yes, i did restart Zope everytime. Thanks anyway. Met vriendelijke groeten, Hans de Wit Stichting Farmaceutische Kengetallen Postbus 30460 2500 GL DEN HAAG Tel. 070-3737448 Fax 070-3737445 Tino Wildenhain To: H.de.Wit(a)SFK.NL, zope(a)zope.org <tino@wildenh cc: ain.de> Fax to: Subject: Re: [Zope] Starting with Iemethod 05/14/01 03:33 PM Hi H, The traceback however should indicate the nature of the problem. Regards Tino --On Montag, 14. Mai 2001 09:18 +0200 H.de.Wit(a)SFK.NL wrote: > Some e-mail before: >>> WYSIWYG HTML applets to get rid of the textareas for HTML input? >> Yes, there is the Johanc's IEMethod Product, that works only for IE5.0 >> http://www.zope.org/Members/johanc/IEMethod/IEMethod/ >> Ausum > > Curiously, i downloaded the product and followed the installation > instructions below, but at step 4 there was no IEMethod. > Is anybody using this product and share some advice? > > 1 Unpack the TorpedSharedModule.tgz in the Zope Shared Modules directory. > E.g. lib/python/Shared/ > 2 Unpack the IEMethod-0.0.6.tgz in the Zope root directory. > 3 Restart Zope. > 4 Create a IEMethod instance. > 5 The IEMethod is subclassed from DTML Method so it should act exactly as > a DTML Method. > 6 The IE Method has a management tab called Editor, besides the ones equal > to DTML Methods. > Notice that this only works if your using Internet Explorer 5. > > > etc. > > > Met vriendelijke groeten, > > Hans de Wit > Stichting Farmaceutische Kengetallen > Postbus 30460 > 2500 GL DEN HAAG > Tel. 070-3737448 > Fax 070-3737445 > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

ZMySQL - can't get it to work
by Gitte Wange 14 May '01

14 May '01

Hello, I have just made a fresh install of Zope (vers. 2.3.2) and now I want to add the ZMySQL product. But ... I have installed Distutils ... I have compiled the MySQL-python module ... but I am not sure where to put the _mysql.so module. I have tried to untar the ZMySQL tarball into Zope/lib/python/Products/ZMySQL When I restart the Zope I just get an error: Import error - no module named _mysql Then I tried to copy the _mysql.so module into the ZMySQL dir but then I got the following error: Import error: _mysql.so: undefined symbol PyObject_Init Okay ... what have I missed here? I have followed the readme files. My python version is 2.0 Regards, -- ************************ Gitte Wange Jensen System Squid Developer MMManager Aps +45 29 72 79 72 gitte(a)mmmanager.org ************************

2 2

my solution to #include in DocumentTemplate
by Lance E Sloan 14 May '01

14 May '01

Just in case anybody is interested (rather unlikely) I thought I'd let everybody know how I resolved my quest for #include-like behavior in DocumentTemplate. Of course, a very good way would have been to actually create a "dtml-include" tag by following the suggestions at zope.org. Being a Python newbie, a Zope not-even-newbie-yet, and under a tight deadline, I didn't go that route. Instead, I happened to stumble across this method. What I was looking for was something like:  in a DTML file to include another DTML file, recursively. I ended up doing this:    It works well. The only problem is that for every object I want to pass to the included document must be specified individually (x = x). I tried these but they didn't work:   For now, this is not too much of a problem, as I'm only including a header or a footer that's common to all my DTML pages and they don't require many arguments. BTW, I think DocumentTemplate is excellent and it should be added to the standard Python distribution. For those that don't know my weird history with this module, I've borrowed DocumentTemplate from Zope to write some CGIs in Python. They're coming along nicely, but I admit that I'm somewhat sloppy. -- Lance E Sloan Web Services, Univ. of Michigan: Full-service Web and database design, development, and hosting. Specializing in Perl & Python CGIs. http://websvcs.itd.umich.edu/ - "Putting U on the Web"

2 1

So...Zope Really DOES Choke And No One Knows Why?
by Ben Ocean 14 May '01

14 May '01

Wonderful, just wonderful. Ahh, the joys of being on the cutting edge. So if my installation of Zope chokes regularly-- like every few hours-- and apparently I'm not alone, then I guess the only way to take care of the problem (until someone nails it in the source code) is to write a cron script that tests, I reckon, port 8080, every 5 minutes or so. How do I test this? ping won't do it. Does anyone have a cron script written that they'd care to share? TIA, BenO

4 3

WYSIWYG HTML applets to get rid of the textareas for HTML input?
by Scott Chapman 14 May '01

14 May '01

I found a Java applet that allows you to edit HTML right in a web page, replacing a textarea with a WYSIWYG HTML editor. It occured to me that this would be a fabulous thing to use with Zope to do away with textarea inputs for HTML. Is anyone doing this? These tools are not free :-( but they are not very expensive either: Cross Platform (Java Applet) implementation of this. (This is the one I'm interested in): http://www.realobjects.de/index.htm?/english/editonpro_e.htm Windows tools that do this: http://www.ektron.com/ewebeditpro.cfm?doc_id=1035 http://www.mifo.com/comgistics.htm http://www.editlive.com/product/ How would you make Zope serve up a java applet without having to run Apache just for applet serving? How hard would it be to make Zope put this type of stuff in the management pages where ever a text box is currently used to grab HTML input? > <HEAD> > <SCRIPT ID=clientEventHandlersJS LANGUAGE=javascript> >  > </HEAD> > > <BODY> > <FORM name="scriptForm" method="post" action="test1.asp" > LANGUAGE=javascript onsubmit="return scriptForm_onsubmit()" > target="_blank"> > > > <APPLET id="editor" name="editor" code="EditorApplet" > archive="edit-on-pro.jar" height=400 width=600 VIEWASTEXT> > > > <PARAM name="CODEBASE" value="../../eopro/"> > > <param name="CABBASE" value="edit-on-pro-signed.cab"> > <param name="LOCALE" value="en_US"> > <param name="BUTTONORDER" value="toolbar.txt"> > <param name="BODYONLY" value="true"> > <param name="TEXTMODE" value="TRUE"> > <param name="SOURCEVIEW" value="TRUE"> > <param name="DEFAULTBACKGROUNDCOLOR" value="white"> > </APPLET> I don't get into Zope internals at all yet so this is beyond my knowlege. Is this a viable solution? Scott

4 3