September 2001 - Zope

Completely brain dead with CookieCrumbler
by Gilles Lenfant 15 Sep '01

15 Sep '01

Please heeeelp ! Sometimes things are simple with Zope, other times I'm completely brain dead for problems that would be so simple with other technologies... Dieter Maurer tried to help me (thanks Dieter) but I did not get all. I got a form that requires an id ad a password/confirm password to a new user. The new user is recorded in the acl_user with a "member" role. Till now, all's fine. I need to make a redirect to a page for "member" users on the fly without falling in the "login_form" page. I tried so many things, including submitting the new credentials from a python script to the "logged_in" method with "__ac_name", "__ac_password" and "came_from" set that should work. I'm so upset that if I get no solution, I'll remove all security features of Zope ;-)) Pleaaase help! So many thanks in advance. --Gilles

2 1

Zope and Roxen integration?
by Tony McDonald 15 Sep '01

15 Sep '01

Hi, I've been looking (again) at integrating Zope and Roxen. I used to use the Zope.cgi method mentioned on the Zope site, but I've never liked the .cgi 'bottleneck', preferring to use ZServer directly. So I was quite pleased to see that a Roxen module has been written that integrates with Zope as a way of running Zope behind a webserver. The module is at http://www.iaeste.or.at/~mbaehr/roxen/zope.pike.text But I've not been able to get Roxen to interpret the content coming from Zope so as to use the graphic text and other tags that Roxen uses. The content presented to the user is complete with the Roxen tags uninterpreted. Has anyone managed to get this module to work correctly with Zope. Thanks Tone. -- Dr Tony McDonald, Assistant Director, FMCC, http://www.fmcc.org.uk/ The Medical School, Newcastle University Tel: +44 191 243 6140 A Zope list for UK HE/FE http://www.fmcc.org.uk/mailman/listinfo/zope

1 0

Re: [Zope] Zope / Apache conflict
by Michael 15 Sep '01

15 Sep '01

Hi Jens, Thanks for your response. We have Apache installed on actually, three different ports. Port 80, port 431 and a later build on 8080. We installed Zope with the -w option directing it to port 8088, then to port 8880, then to port 9268, then to port 29268. In all cases, as long as port 8080 was enabled Zope failed to connect. The assigned port was enabled and listening, but Zope would not respond. As soon as we killed 8080, it would run on any of the assigned ports. This is why we were confused. It should run wherever we assign it, regardless of how many servers we are running, but it doesn't. On Sat, 15 Sep 2001, Jens Vagelpohl contacted me regarding: Re: [Zope] Zope / Apache conflict > you can tell zope which port to use by executing the "start" script with > the "-w" switch followed by a port number. > > please read the comments in z2.py in the root of your zope installation, > it explains all command line switches very well. > > jens ------------------------------------------------------- -- Michael Lewis Exasource Inc. Phone: 970.206.4556 Email: mlewis(a)exasource.com "Linux - The final solution"

1 0

accessing Python product classes from a Python script
by Mitchell Model 15 Sep '01

15 Sep '01

I found the solution to the problem I posted last night about importing my product modules in a Python script: use an external method instead. [Cf. http://www.zope.org/Members/michel/ZB/ScriptingZope.dtml and search for "Import limits".] I do have a further question, though. That paragraph includes this text: "modules which have been specifically made available to scripts by product authors. See Appendix A for more information on these modules." I don't understand the reference to Appendix A -- is this a mistake? Is making a product available to scripts something anyone can do (and if so, how?), or is it just for Zope's initial products?

2 1

Re: [Zope] remote address
by Richard Barrett 15 Sep '01

15 Sep '01

Further to my earlier post, what follows is extracted from the on-line documentation for the Squid caching proxy server (see http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.17) which you could use instead of Apache to front your Zope server. Of note is that squid optionally adds a non-standard HTTP header to pass on the IP number it received the request from but the squid FAQ correctly warns about depending on this information as the basis for access control. What is supplied in this header is at best informational. Squid FAQ says: ---------------------------- 4.17 What is ``HTTP_X_FORWARDED_FOR''? Why does squid provide it to WWW servers, and how can I stop it? When a proxy-cache is used, a server does not see the connection coming from the originating client. Many people like to implement access controls based on the client address. To accommodate these people, Squid adds its own request header called "X-Forwarded-For" which looks like this: X-Forwarded-For: 128.138.243.150, unknown, 192.52.106.30 Entries are always IP addresses, or the word 'unknown' if the address could not be determined or if it has been disabled with the forwarded_for configuration option. We must note that access controls based on this header are extremely weak and simple to fake. Anyone may hand-enter a request with any IP address whatsoever. This is perhaps the reason why client IP addresses have been omitted from the HTTP/1.1 specification. -------------------------------------------- At 14:19 14/09/2001 +0800, Fritz Mesedilla wrote: >My setup right now has apache in front then zope. >When I do a <dtml-var REMOTE_ADDR> it gives the address of the apache >server. >Is there a way to get the address of the visitor and not the apache server? There is a patch for Apache which leads it, when acting as a Proxy, to forward the incoming request information it is seeing in an HTTP VIA header (See RFC2616) which it adds to the request. There is info about this patch at http://www.zope.org/Members/unfo/apache_zserver_ssl but I've not yet used it myself. Using this makes things a bit messy, which is why I'm not going with it yet, as you would have to look in REMOTE_ADDR and if that contained your Proxy Apache's IP number then test against the VIA header. The problem is that this HTTP header was not intended for forwarding information about the originating client but for adding information about intermediate proxies and gateways that have handled the incoming request. Depending on how the patch is implemented, i.e. does it add information to any pre-existing VIA header or replace it, the header could contain information about other intermediate Proxies. Probably the best you can do is determine that the request originated outside your domain rather than getting an absolute determination of the ultimate client's IP number. Bear in mind that if the incoming request came through another proxy server your Apache Proxy would see the request as coming from that other proxy's IP number and have no way of determining the ultimate origin of the request. Best of luck. >Thanks. > >Fritz Mesedilla >Systems Administrator > >Summit Interactive, Inc. >FHM | Seventeen | Candy | Cosmopolitan | Preview | Good Housekeeping >femalenetwork.com | candymag.com | fhm.com.ph | cosmo.com.ph > >Palm Pilot Software: TVSked - Download from the link below >---------------------------------------------------------------------------- >http://mesedilla.tripod.com +Basta Ikaw Lord > > >_______________________________________________ >Zope maillist - Zope(a)zope.org >http://lists.zope.org/mailman/listinfo/zope >** No cross posts or HTML encoding! ** >(Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

3 2

Zope 2.4.0, CookieUserFolder, Anonymous Access
by Achim Domma 15 Sep '01

15 Sep '01

Hi, I try to use CookieUserFolder to let Users authenticate through a webform, but if I create a CookieUserFolder a folder, the anonymous user can't access anything in this folder. I do the following steps : 1. create new folder 2. create DTMLDocument index_html in this folder 3. try to access index_html as anonymous user -> ok ! 4. create CookieUserFolder in this folder, change nothing else 5. try to access index_html as anonymous user -> login form apears !? I tried to understand the code of CookieUserFolder and as far as I understand it also checks the anonymous user. It seems also to walk the folder hierarchy up to check other folders. Could it be problem, that I have a normal userfolder in a parentfolder ? In the folder above my new folder the anonymous user can access index_html and I use Acquisition, so I don't understand what's going wrong. Another question : If I remove the CookieUserFolder again I still cannot access index_html. Is this normal ? greetings Achim

2 2

FYI: cbsnewyork
by Albert Boulanger 15 Sep '01

15 Sep '01

As is known by many here, cbsnewyork is a Zope site and is up and servicing NYC with information during these days of infamy. Regards, Albert Boulanger aboulanger(a)vpatch.com

5 4

Re: [Zope] Good way to send mail from Python Scripts?
by complaw＠hal-pc.org 15 Sep '01

15 Sep '01

There is a good demo of sending mail on the ZopeLabs site (http://www.zopelabs.com) See specifically: http://www.zopelabs.com/cookbook/991178206 HTH, Ron > Hi Zopers > > In my experience, it's tricky to send mail from Python Scripts. > Here's how I'm doing it at the moment. > > 1. Have a DTML method which does the mailing. This method should > have the 'Manager' proxy role (or a role which is allowed to > access your 'MailHost'). > > 'mailMessage':: > > <dtml-try> > <dtml-sendmail ...> > text text text > </dtml-sendmail> > </dtml-try> > > 2. Have a Python script which calls 'mailMessage'. > > 'mailMessages':: > > # Lots of intricate logic which would be painful in DTML ... > for this in these: > container.mailMessage( container > , REQUEST, _ > , address=this.address > ) > > Note that 'mailMessage' is unhappy if it is called without DTML > namespace (? check this) and 'REQUEST'. > > 3. Now, unfortunately, the 'mailMessages' Python script won't have a > 'REQUEST' of its own. In order to get hold of a 'REQUEST', wrap the > Python script in another DTML method, and see to it that 'REQUEST' is > included in the list of parameters for 'mailMessages'. > > 'mailMessagesWrapper':: > > <dtml-call mailMessages> > > I'm pretty sure this will trigger lots of good advice on what I could be > doing better .. that would be most welcome. > > Regards, > Jean > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

2 1

Good way to send mail from Python Scripts?
by Jean Jordaan 15 Sep '01

15 Sep '01

Hi Zopers In my experience, it's tricky to send mail from Python Scripts. Here's how I'm doing it at the moment. 1. Have a DTML method which does the mailing. This method should have the 'Manager' proxy role (or a role which is allowed to access your 'MailHost'). 'mailMessage':: <dtml-try> <dtml-sendmail ...> text text text </dtml-sendmail> </dtml-try> 2. Have a Python script which calls 'mailMessage'. 'mailMessages':: # Lots of intricate logic which would be painful in DTML ... for this in these: container.mailMessage( container , REQUEST, _ , address=this.address ) Note that 'mailMessage' is unhappy if it is called without DTML namespace (? check this) and 'REQUEST'. 3. Now, unfortunately, the 'mailMessages' Python script won't have a 'REQUEST' of its own. In order to get hold of a 'REQUEST', wrap the Python script in another DTML method, and see to it that 'REQUEST' is included in the list of parameters for 'mailMessages'. 'mailMessagesWrapper':: <dtml-call mailMessages> I'm pretty sure this will trigger lots of good advice on what I could be doing better .. that would be most welcome. Regards, Jean

2 2

Using Images in Structured Text
by Severin Wiedemann 15 Sep '01

15 Sep '01

Hello ! I saw that the code for using inline Images in STX like eg. "My Image":img:myimage.jpg is already in the Zope Distribution. I want to use the img-Style in DTML-Documents which I include in other Documents via the <dtml-var xyz fmt=structured-text> command. Has anyone a solution for that problem. I saw that only Standard-Structured-Text is used, when I use the above notation. So maybe there is another fmt or something like that, maybe as an extention/patch to Standard-Zope. Thanks ! Severin Wiedemann -- Wiedemann EDV Systeme GmbH Landsbergerstr. 77 80339 München Tel.: 089/5108599-0 Fax.: 089/5108599-99

3 2