February 2002 - Zope

Re: [Zope] Cookie authentication: CUF and XUF (fwd)
by Dieter Maurer 20 Feb '02

20 Feb '02

darrylc writes: Can you please stay on the mailing list? (Added again) > I have been running tests with IE 5 and IE 6 and am running into the same > problem. If I set the CUF to expire the cookies after the browser session, > I can view the first page on my site, but if I go to another link within > the same site/level I get thrown back to the authorization page and zope > thinks I am an anonymous user. This is with the expiration set to end > after the session. > > Testing with Netscape, Galeon, or Opera works fine. > > Anyone else see this? A colleague may have seen something similar: He works on a Zope-CMF based portal. When he logs in from deep inside the portal, he looses the authentication cookie when he later visits pages higher up in the portal. This is normal behaviour when the "setCookie" call does not contain a "path" parameter. However, when I tried to reproduce the behaviour, I have been unable to do so. The difference: while I work with Netscape/Konqueror my colleague uses IE (5.5). I did not investigate further because our client wants the authentication immediate at the portal entrance, a case handled correctly by IE, too. I cannot help you further. I am essentially a Unix-only guy. Investigating problems restricted to IE is quite difficult for me. Therefore, please stay on the list... Dieter

3 2

Re: [Zope] ZSQL and last_insert_id
by Frank Tegtmeyer 20 Feb '02

20 Feb '02

"Chad Nantais" <cnantais(a)rednaxel.com> writes: > What is the right syntax for getting the id of the last recorded inserted > with ZSQL methods? I tried this: > SELECT LAST_INSERT_ID() AS last_insert_id Depending on your database this may be a dangerous way to do this. For example MySQL handles last_insert_id on a per thread base. This means that you could run into a race condition where one Zope thread grabs last_insert_id while another thread has inserted your record. In this case you get the wrong value. We used an external method to generate unique id's - in this case by opening a separate connection to the database, inserting into a counter table and getting last_insert_id. The connection is closed after that. Other implementations are of course possible: for example using the FSCounter product or an object based on Dieter Maurers SharedResource (http://www.dieter.handshake.de/pyprojects/zope/SharedResource.html) Like Perl programmers say: there is more than one way to do it :) Regards, Frank -- CTO fte(a)Lightwerk.com http://www.Lightwerk.com/ Fax: +49-2434-80 07 94 Phone: +49-2434-80 07 81 Lightwerk GmbH * An der Kull 11 * 41844 Wegberg * Germany Besuchen Sie uns auf der CeBIT: Halle 6, Stand F68 / 595

1 0

AW: [Zope] Priority of processes in Zope
by oliver.erlewein＠sqs.de 20 Feb '02

20 Feb '02

Hi Matthew Well I changed the -i Option of Zope already. I used 10, 100, 120. There was no change in behaviour. Pitty. I'll have a look at the sections you mentioned. Maybe I'll find something. Thanx for the detailed help! Oliver Erlewein

1 0

ip redirect
by Tom Scheidt 20 Feb '02

20 Feb '02

Hi, I'm looking for a quick way to redirect users from certain IP addreses as in the example below. Notice the wildcard (*). Thanks in advance for your help. <dtml-if "REMOTE_ADDR == '255.255.2255.*'"> <dtml-var "RESPONSE.redirect('/redirect_html')"> </dtml-if> Tom

3 2

Re: [Zope] timeTime() function question
by Anthony Baxter 20 Feb '02

20 Feb '02

In addition, note that the original number is a unix timestamp - seconds since 01/01/1970. So to add two weeks to it, you'd do: t + ( 2 * 7 * 24 * 60 * 60 ) Anthony >>> "Andreas Jung" wrote > Why do you want to use the timeTime() representation ? > Just add 14 (2*7 days) to the instance of the corresponding > DateTime object. > > newDate = DateTime("2002/02/05") + 14 > > - aj > > ----- Original Message ----- > From: <hpinson(a)indepthl.com> > To: <zope(a)zope.org> > Sent: Tuesday, February 19, 2002 20:12 > Subject: [Zope] timeTime() function question > > > > Can anyone explain the math behind the Python / Zope UTC > > timeTime() function? I need to add two weeks to a timeTime > > generated date, for post processing. > > > > For example; with the timeTime() generated number: > > > > 1014071233.22 > > > > What would two weeks from this number be, in timeTime format? > > > > Harlow Pinson > > Indepth Learning > > Email: hpinson(a)indepthl.com > > Web: http://www.indepthl.com > > Voice: 505-994-2135 > > FAX: 208-475-7678 > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) > -- Anthony Baxter <anthony(a)interlink.com.au> It's never to late to have a happy childhood.

1 0

timeTime() function question
by hpinson＠indepthl.com 20 Feb '02

20 Feb '02

Can anyone explain the math behind the Python / Zope UTC timeTime() function? I need to add two weeks to a timeTime generated date, for post processing. For example; with the timeTime() generated number: 1014071233.22 What would two weeks from this number be, in timeTime format? Harlow Pinson Indepth Learning Email: hpinson(a)indepthl.com Web: http://www.indepthl.com Voice: 505-994-2135 FAX: 208-475-7678

2 2

Re: [Zope] CUF, XUF, and the Redmond Axis of Evil
by complaw＠hal-pc.org 20 Feb '02

20 Feb '02

Some of my users have had trouble when using IE (5.5 or greater, particularly the verion that comes with WinXP). While it doesn't seem to be a server OS issue, I suspect that it does have something to do either with acquisition and Zope (where the acl user folder is located within the heirarchy somehow affecting the cookie) and/or within IE itself (IE somehow making an assumption that anything below the initial login branch is okay but then "invalidating" the assumption when the user goes above the point of initial login). I don't have the code for IE and my search on the 'Net hasn't turned up any evidence to support the latter theory, so take it for what its worth. A conceivable workaround would be to detect an unauthorized person, redirect to the root/home page, authenticate, and then redirect back to the original page. Once IE is authenticated as far up as it can go, it seems to behave itself. How you do the work around, however, is unknown. The workaround that I suggest to my users is to get Netscape. I have that luxury, and that does solve the problem. Unfortunately, that won't help you. Sorry I can't be of more help. Ron > Sorry for writing to your directly on this, but I am in a bit of a time > crunch and I am trying to sell zope to my managers. But if it this is not > going to work with IE it is a show-stopper. I have writttn Jens V. (author > of CUF) also, but he could offer no help as he is a Mac/UNIX guy too. So > am I, but somehow I get stuck aiding the unwashed Windows massess. > > I a am Galeon fan myself, but unfortunately most of the people hitting my > site are going to be using the evil, but pervasive, IE. > > Thanks for your comment. > > -D > > > On Tue, 19 Feb 2002, Dieter Maurer wrote: > > > darrylc writes: > > Can you please stay on the mailing list? (Added again) > > > > > I have been running tests with IE 5 and IE 6 and am running into the same > > > problem. If I set the CUF to expire the cookies after the browser session, > > > I can view the first page on my site, but if I go to another link within > > > the same site/level I get thrown back to the authorization page and zope > > > thinks I am an anonymous user. This is with the expiration set to end > > > after the session. > > > > > > Testing with Netscape, Galeon, or Opera works fine. > > > > > > Anyone else see this? > > A colleague may have seen something similar: > > > > He works on a Zope-CMF based portal. When he logs in > > from deep inside the portal, he looses the authentication > > cookie when he later visits pages higher up in the portal. > > > > This is normal behaviour when the "setCookie" call does not > > contain a "path" parameter. However, when I tried to reproduce > > the behaviour, I have been unable to do so. > > The difference: while I work with Netscape/Konqueror > > my colleague uses IE (5.5). > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Question about accessing properties of images
by Kevin Carlson 19 Feb '02

19 Feb '02

I have some code where I am in a folder and am accessing an image in that folder by name (passed into the page as an argument named "pic" in the URL). I am trying to access a property ("desc") of the image object ("pic") and am only able to do it using the following code: (Note that I am doing this from the folder containing the image object.) <dtml-in objectItems prefix=p > <dtml-if expr="p_key == pic"> <dtml-var desc html_quote> </dtml-if> </dtml-in> This seems a bit wasteful to go through a <dtml-in> loop in order to retrieve the "desc" property from the image. Is there an easier way to do this?

2 1

Using Form data values in ZSQL Method: I must be missing something here
by Howard Hansen 19 Feb '02

19 Feb '02

I'm certain that I'm doing something very silly here, and I've learned many new things about Zope and databases by researching this problem, but I haven't figured out how to make it work. All I want to do is create forms that allow me to insert or update records in a database. Here's the structure I've set up: form: collects the form data, and when the user clicks submit, it calls: action_dtml_method: which calls: zsql_method, which modifies the database and tells the user what just happened When I hit Submit, I can easily list the values from the form inside the action_dtml_method, but zsql_method acts like it has no clue about the form values. It gives me the error: Missing input variable, field_companyname and the traceback:  I've tried using <dtml-call zsql_method>, <dtml-with zsql_method>, <dtml-in zsql_method>, and each of those using "zsql_method()" as well. I could try to pass the values explicitly, but I've used acquisition very effectively in other situations, and I'm not terribly interested in passing 29 parameters to the query. Clearly, I'm missing something fundamental, could someone please tell me what it is? Thanks! Howard Hansen http://howard.editthispage.com

4 5

Help: Zope and LDAP
by Tim Hawes 19 Feb '02

19 Feb '02

I am new to this list, new to Zope, and new to Python. I am, however, an old hat to perl, c/c++, and LDAP. I am very interested in Python and would consider picking up the now unmaintained ZopeLDAP package, that is if noone picks it up before me. I have not been able to get the addSubentry() function to work in ZopeLDAP. The docs are not very clear to me in how to use it. >From "PROGRAMMING.txt": 1. Getting an Entry Object and its attributes Using an LDAP Filter object is the best way to get an Entry object. LDAP Filter objects act like methods\functions and return a sequence of entry objects (so they can be used with any sort of looping structure). For example, if you had an LDAP Filter titled 'lookupByEmail' with the parameter 'email' with the content:: mail=<dtml-var name="mail">* Can be used in DTML like this:: [DTML example skipped] Or in a Python Script like this:: entries = container.lookupByEmail(email='jef') for entry in entries: # do something here... This all works fine and dandy for LDAP queries, and I can get selected fields from our LDAP tree in an HTML table quite rapidly with this. The problem comes in the explanation of how addSubentry() works... 3.1. Adding subentries Adding subentries to an Entry object is done through the 'addSubentry' method. Adding subentries is protected by the permission **Create New Entry Objects**. **addSubentry(rdn, [attrs,kw])** -- Add a new subentry identified by the rdn. The rdn **MUST** be a string in the form 'attr=value', such as 'ou=Housewares' or 'cn=Davy Jones'. The rest of the signature can be a combination of a dictionary of attributes passed in to 'attrs' or keyword arguments. If no 'objectClass' attribute is passed in, the default objectClass is 'top'. The newly created Entry object is returned, wrapped in the acquisition context of its parent. Some example uses are:: betty = housewares.addSubentry("cn=Betty Ford", { "objectClass": ["top", "person"], "sn": "Ford", }) clinic = betty.addSubentry("sn=Clinic", objectClass=["top","place"], description="A good place to go..." ) I take this to mean that in order to add subentries, I have to first create an Entry object as specified in the first paragraph that would seclude the object I want to add the object to?! Anyway, I have read and reread this file and it still makes no sense to me. I tried adding an LDAP filter that isolates the organizational unit I want to add entries to (ou=People,<basedn>) specify a basedn with an LDAP filter method called rootOU. I then write this script to work the magic I am hoping for: entries = container.rootOU() People = entries[0] fname = "BBBB" lname = "cccc" name = "%s %s" % (fname, lname) uidname = "%s.%s" % (fname, lname) rdn = "uid=%s" % uidname newentry = People.addSubentry(rdn,{"objectClass":["top","person","organizationalPerson","inetorgperson","dirmuser"], "sn":lname, "cn":name}) print "Success" return printed On test, I get this exception: Error Type: TYPE_OR_VALUE_EXISTS Error Value: {'desc': 'Type or value exists'} Traceback (innermost last): File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/zope/2.4.3/lib/python/Zope/__init__.py, line 226, in zpublisher_exception_hook (Object: Admin) File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/zope/2.4.3/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: copy_of_addentry) File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: copy_of_addentry) File /usr/local/zope/2.4.3/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: copy_of_addentry) File /usr/local/zope/2.4.3/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: copy_of_addentry) File /usr/local/zope/2.4.3/lib/python/Products/PythonScripts/PythonScript.py, line 363, in _exec (Object: copy_of_addentry) (Info: ({'script': <PythonScript instance at f538b8>, 'context': <Folder instance at ff6ad0>, 'container': <Folder instance at ff6ad0>, 'traverse_subpath': []}, (), {}, None)) File Script (Python), line 11, in copy_of_addentry (Object: guarded_getitem) File /usr/local/zope/2.4.3/lib/python/Products/ZLDAPConnection/Entry.py, line 249, in addSubentry (Object: GenericEntry) File /usr/local/zope/2.4.3/lib/python/Products/ZLDAPConnection/ZLDAP.py, line 344, in _addEntry (Object: Hrdhhs34_Directory) TYPE_OR_VALUE_EXISTS: (see above) After pulling hair out of my "already-balding-head" I resolved to by-pass ZopeLDAP altogether and use the python-ldap module directly, much more closely resembles the LDAP C API. I add ldap as one of the allowable modules for Zope, restart it, and when I try to ldap.simple_bind(), I get prompted to login frivolously (just like what happens when you try to import a module in a python script that is forbidden), so I cancel and get: An error was encountered while publishing this resource. Unauthorized Sorry, a site error occurred. Traceback (innermost last): File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 223, in publish_module File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 187, in publish File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 171, in publish File /usr/local/zope/2.4.3/lib/python/ZPublisher/mapply.py, line 160, in mapply (Object: python-ldap-test) File /usr/local/zope/2.4.3/lib/python/ZPublisher/Publish.py, line 112, in call_object (Object: python-ldap-test) File /usr/local/zope/2.4.3/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__ (Object: python-ldap-test) File /usr/local/zope/2.4.3/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec (Object: python-ldap-test) File /usr/local/zope/2.4.3/lib/python/Products/PythonScripts/PythonScript.py, line 363, in _exec (Object: python-ldap-test) (Info: ({'script': <PythonScript instance at db4410>, 'context': <Folder instance at ff6ad0>, 'container': <Folder instance at ff6ad0>, 'traverse_subpath': []}, (), {}, None)) File Script (Python), line 3, in python-ldap-test (Object: guarded_getattr) File /usr/local/zope/2.4.3/lib/python/AccessControl/ZopeGuards.py, line 122, in guarded_getattr File /usr/local/zope/2.4.3/lib/python/AccessControl/SecurityManager.py, line 149, in validate File /usr/local/zope/2.4.3/lib/python/AccessControl/ZopeSecurityPolicy.py, line 172, in validate Unauthorized: simple_bind I would think think that a simple_bind() method would be implicitly allowed with the ldap module! Can anyone help? If ZopeLDAP is simply beyond support, I would be more than happy to utilize python-ldap instead (being already familiar with the C API). Thank you.

4 4