October 2002 - Zope - Zope lists

ALERT - shutdown security hole?
by Jaroslav Lukesh 03 Oct '02

03 Oct '02

Hi all, it is possible security hole or I have misconfigured security in my Zope server? All users who has authorized access should have do SHUTDOWN action http://usr:pwd@localhost:8080/Control_Panel?manage_shutdown:action=Shutdown Note that "user" is defined only for virtual subweb /www/www.domain.cz and is in group "editor" that exists only in that subweb. Regards J. Lukesh

1 0

Developing products in anticipation of Zope 3
by Wankyu Choi 03 Oct '02

03 Oct '02

Hi All, I have a rather big and complex portal project that'll take at least half a year to complete (plus, I need to pack in e-commerce and club features to accomodate the existing user base, a huge one). Taking CMF and/or Plone as it is would need too much customization. Still, basing my project on CMF is an option I'm considering. Until now, I've been coding this portal from scratch with no dependency on any other product and it's usable with 1.0b tag. (It's in no way complete and not public yet, but if you want to see it in action visit http://www.neoboard.net. Only a minimum set of features - navigation, article system, etc - are visible since my other open source project "NeoBoard" doesn't require Membership and stuff.). What holds me back from going ahead with my plan is... Zope 3. I read an interview article where Jim Fulton **hoped** Zope 3 would be available in **a** usable form in July or early this fall. Against this backdrop, what would you do if you were in my shoes? 1. Go ahead with the no-dependency plan with all modules having distinct connecting points with Zope so that I could plug them into Zope 3 some day. (Is it even possible? Not sure if Zope2 products would seemlessly integrate into Zope3. Jim's interview suggested Zope3 would offer backward compatibility but also suggested that Zope2 products would have to get upgraded to Zope3 architecture anyway.) 2. Base my project on CMF since CMF will be integrated into Zope 3 Core. I'm a bit reluctant to taking this option since, again, too much customization is called for. I'd have to override almost all tools/types plus authentication scheme in order to accomodate the existing user base. (Guess it'll take a lot of re-coding anyhow with Zope 3 even if I push ahead with this plan.) 3. Create a Zope 3 sandbox. Experiment with it and get on with the project inching along with Zope3 development. Learn-and-develop-as-I-go approach, sort of. I'm pretty much inclined to option number 3. I don't want my project to become a dinasaur when Zope 3 surfaces. (Wouldn't I see myself having to upgrade my product the moment Zope 3 gets here in full swing just when I thought the project was over?) Any thoughts/help will be appreciated. Regards, Wankyu Choi

1 0

Kebasdata ques
by AM 03 Oct '02

03 Oct '02

Hi, I was trying out KebasData and I instantited it in on eof my folder. Filled in the URL and pattern but when I click Initialize in the Edit page I get : Kebas Data not initialized. Internal Server Error (2002-10-02 18:21) What does that mean?? I looked in the debug but nothing. What am I doing wrong?? TIA AM -- ================================================================== Aseem Mohanty Neurobehavioral Systems Inc, 828 San Pablo Ave, Albany, CA 94706 (R) 510 7696011 (M) 510 3014871 (O) 510 5279231 ================================================================== "I saw `cout' being shifted "Hello world" times to the left and stopped right there!!" -- Steve Gonedes ==================================================================

1 0

[OT] Double HTTP POSTS with Internet Explorer???
by peter sabaini 02 Oct '02

02 Oct '02

Hi, this very probably has nothing to do with Zope but I'm at my wits end and maybe one of you has had this before so here goes: - I have a large-ish form (~30 input fields) which has a method="POST" - When using Internet Explorer (tested: 5.5 and 6.0 SP 1), submitting this form seems to result in *two* POST Requests - This cannot be reproduced reliably, i.e. roughly half the time form submission results in one POST (as it should be), half the time there are two POSTs - With Mozilla 1.1 (win32, linux) theres always just one POST - I captured network traffic (using Ethereal); IE seems to just close the connection, sometimes even before finishing to send the POST data, without waiting for an answer (HTTP /1.1 200 OK etc.). It just sends a TCP FIN, ACK and opens a new connection. - There is virtually no time lag between the two POSTs (no "hang" or something like that) Has anyone had anything like this before? Do you have any tips on debugging this? Any help would be greatly appreciated. Thanks, peter. ps.: System: w2k pro, Zope 2.5.1 binary, browsers: IE 5.5, Mozilla 1.1 (linux, win32)

1 0

Re: [Zope] Is Anyone Listening?? Port 8021 Isn't!
by beno 02 Oct '02

02 Oct '02

At 04:57 PM 10/2/2002 -0400, you wrote: >8021 is the ftp port, right? I think the default start script does not >start a ftpd on 8021. Take a look at your start script. Here's the >standard line "out of the box": > >exec $INST_HOME/bin/python $INST_HOME/z2.py -D "$@" > >or something to that effect. Change it to: > >exec $INST_HOME/bin/python $INST_HOME/z2.py -D -f 8021 -w 8080 "$@" I edited the *start* script thus: #! /bin/sh reldir=`dirname $0` INST_HOME=`cd $reldir; pwd` export INST_HOME exec /usr/local/bin/python \ $INST_HOME/z2.py -D -f8021 -w8080 "$@" Nonetheless, port 8021 wasn't functioning upon reboot of Zope. (Strangely, *netstat -n -a* didn't show port 8080, either, although I could surf to Zope.) Would you mind explaining what the "$@" does? I can translate the shell script, but I don't understand what you're doing. >you can get rid of the '-D' if you want zope to detach from the terminal >and run in the background. Error msgs are logged in var/Z2.log I couldn't find any error log by that name anywhere in my Zope installation. Does it only create itself if there is an error to log? TIA, beno

1 0

Combined the fixes for XMLRPC traceback, authorization, and authorization failure for everyone
by Derek Basch 02 Oct '02

02 Oct '02

Zopers, For the good of eveyone I combined the work of these people: http://www.zope.org/Members/Amos/XML-RPC http://collector.zope.org/Zope/525/collector_issue_contents http://zope.nipltd.com/public/lists/zope-archive.nsf/242bb7cc2b2c343d802568… So Amos, Brad and Dieter repspectively. These fixed modules should: 1) Add basic HTTP authorization to XMLRPC calls. 2) return HTTP 401 in the event of an authorization failure. (I don't have time to install TCP dump on cygwin, can someone verify this for me?) 3) Return a compact traceback with all other xmlrpclib.Fault exceptions. Links to modules(sorry no diffs, just txt): http://www.geocities.com/dbasch/xmlrpc.txt http://www.geocities.com/dbasch/xmlrpclib.txt I haven't had time to test them very thoroughly so please let me know if anyone has problems. btw, im still relative newbie in Zope and im just combining the work of others here. So, if I did something horribly wrong, please let me know. It won't hurt my feelings :) Regards, Derek Basch __________________________________________________ Do you Yahoo!? New DSL Internet Access from SBC & Yahoo! http://sbc.yahoo.com

1 0

Is Anyone Listening?? Port 8021 Isn't!
by beno 02 Oct '02

02 Oct '02

Hi; How do I trouble-shoot the fact that port 8021 isn't listening on my RH72 Zope2.4.? installation? Please help. TIA, beno

2 3

variable manipulation
by Dan Jacobs 02 Oct '02

02 Oct '02

Hi, I have a variable name set in my namespace. I want to do something like if variablename = blah then display 'thanks' without re-writing the variable in the namespace. Any ideas? Thanks Dan - Dan Jacobs - 07956 246 659

1 0

SiteRoot Base and copying/pasting
by Fearless Froggie 02 Oct '02

02 Oct '02

My ISP is using Apache to point a couple of my domains to a couple of my zope folders, then I'm setting a SiteRoot Base in those folders to those domains so my urls look right (some of those subfolders were breeding like crazy in the URL). I noticed that I can't copy something under one SiteRoot and paste it outside of that SiteRoot. Why is that? Is that a permissions issue or is that a result of the fact that the URLs have been rewritten by the SiteRoot? I've also noticed that I need to re-login for each "SiteRooted" section. Thanks! Rita. __________________________________________________ Do you Yahoo!? New DSL Internet Access from SBC & Yahoo! http://sbc.yahoo.com

2 1

RE: [Zope] Is Anyone Listening?? Port 8021 Isn't!
by sean.upton＠uniontrib.com 02 Oct '02

02 Oct '02

Since you are using zctl.py, which I haven't used, I'm not sure if I can comment, though it might be related to the options within it? This is likely a problem with a startup script. Is there a reason why you are tied to this specific old, binary version of Zope for this particular install? Sean -----Original Message----- From: beno [mailto:zope@thewebsons.com] Sent: Wednesday, October 02, 2002 12:25 PM To: zope(a)zope.org Subject: Re: [Zope] Is Anyone Listening?? Port 8021 Isn't! At 12:16 PM 10/2/2002 -0600, you wrote: >Beno > >Where did you install Zope, ( eg: /usr/local ) /home/http/ZopeInstallation/Zope_software_home/ I also use the following directories on the same level with that directory: InstanceHome, OtherProducts and I start Zope from InstanceHome >and did you install the binary >distribution or RPM, or compile it from source? I installed it from binaries. Sean Upton writes: >> What kind of release are you running. 2.4.3 >> Have you looked at your startup script? nohup ./zctl.py start >> Also, make sure you have the lsof package installed on your RH72 box >> (this lists open file descriptors and sockets) and run 'losf | grep TCP' >> to see what ports are being used on your box by various applications. Did this, but couldn't find the ports! I also ran *netstat -n -a* and port 8021 wasn't there. Thanks :) beno _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0