April 2002 - Zope - Zope lists

[SUM] zope cvs on Cygwin
by Didier Georgieff 03 Apr '02

03 Apr '02

Hello, As promized, i summarized the solution in a how-to on zope.org. http://www.zope.org/Members/dgeorgieff/howto_zope_cvs_on_cygwin/ thanks again Chris (and jason). Didier.

2 3

Re: Copying a Zope Site
by Bill Bell 03 Apr '02

03 Apr '02

Milos Prudek <milos.prudek(a)tiscali.cz> wrote: >Terry Hancock wrote: >>>From: "Bill Bell" <bill-bell(a)bill-bell.hamilton.on.ca> >>>kapil thangavelu <kthangavelu(a)earthlink.net> wrote, in part: >>> >>>>take a look andy's zsyncer product ... http://www.zope.org/Members/andym >>> >>>Does ZSyncer preserve modification dates? I mean, if one copies a site >>>using this product will invididual objects in the newly minted copies >have >>>the same modification dates as the originals? > >Simply copy the Data.fs to the new destination. But you must first >install all Products that are installed at the original site. Milos, thanks. Unfortunately I failed to mention that I do not have sufficient privileges on the destination site. I can 'import' but cannot copy. Bill ------------ "It is the time that you have wasted for your rose that makes your rose so important."--St-Exupery

1 0

ZFirebirdDA problems
by smarszalek＠digi-trade.cz 03 Apr '02

03 Apr '02

Anyone using ZFirebirdDA and kinterbasdb? I have tried Win32 version and not able to use insert/update command. Send select statement works fine but when usinf insert/update statement and error occures. Also I have compiled kinterbasdb on FreeBD 4.5 but it ZFirebirdDA doesn't work as well. Any advice? David Marko

2 1

RE: [Zope] W2K Cron Question
by abg＠comco-inc.com 03 Apr '02

03 Apr '02

Here's some freeware that supposedly does the job. I haven't tried it, though. http://www.kalab.com/freeware/cron/cron.htm > -----Original Message----- > From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On Behalf Of > hpinson(a)indepthl.com > Sent: Wednesday, April 03, 2002 12:26 PM > To: zope(a)zope.org > Subject: [Zope] W2K Cron Question > > > Does anyone have suggestions for an approach to executing a dtml > method nightly? > > The platform is Windows 2000, and I have access to the Task > Scheduler to run python and perl scripts from the command line. > > Thanks! > > Harlow Pinson > Indepth Learning > Email: hpinson(a)indepthl.com > Web: http://www.indepthl.com > Voice: 505-994-2135 > FAX: 208-475-7678 > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Zope] Calling a dtml method from a product
by hans 03 Apr '02

03 Apr '02

Geoff Armstrong wrote: > I'm now managing to call my dtml method from my python product; but > the DTMLMethod needs to set some variables in the REQUEST object. <dtml-call "REQUEST.set( 'yourname', yourvalue)"> > I know this must seem like a dumb question; but can you tell me how > to pass an empty REQUEST object in the call, so the DTMLMethod can > set and make use of these variables? > > __call__(myDTMLMethod, REQUEST???) NOTE: better ask zope(a)zope.org, so all member may profit :-) a) REQUEST is an object that seemingly behaves just like a python dictionary b) the __call__-method of DTMLMethod has REQUEST={}, so by default if no 2nd parameter is given, it is empty. Note that DTMLMethods are usually interpreted in the context (=namespace) of their caller. c) the third parameter **kw is a sequence of keyword parameters. -- ------------------------------------------------------------- Who's got only a hammer sees the world as a nail hans augustin (software developer) hans(a)beehive.de beehive elektronische medien GmbH http://www.beehive.de phone: +49 30 847-82 0 fax: +49 30 847-82 299

2 2

xml-rpc with Java - binary data
by Tom Content 03 Apr '02

03 Apr '02

Hi all, i have a little big Problem with the xml-rpc in Zope. Is it possible to transport binary Data (e.g. Images) with xml-rpc to a Java-Client ? I have written a little Java-Progi where i can receive a pure html(dtml)-Dokument (tom_htm): Part of the Java-Progi.: ........ XmlRpcClient server = new XmlRpcClient("http://localhost:8080/tom/"); server.setBasicAuthentication("xx","xx"); // Empty Parameter list. Vector params = new Vector(); // Server Call and Printout Result String result = (String) server.execute("tom_htm",params); System.out.println("Inhalt von tom_htm: " + result); } catch (XmlRpcException exception) {......} ........ The Program prints out the Source Code of the tom_htm-document, which is ok. In the same Zope-Folder (/tom) is a beautiful Picture (Pic1). When i try now to change the line: String result = (String) server.execute("tom_htm",params); into String result = (String) server.execute("pic1",params); --> I only get errors ! How can i receive the Picture or any other binary data ? How do i have to change my program ? Or do i have to modify something in my Zope-Project ? Maybe i need a addon/product ?? Thank you in advance for your help, Tom -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

2 1

CBSNewYork.com using ZUBB!?!
by BZ 03 Apr '02

03 Apr '02

Oh yes, they are. http://cbsnewyork.com/message/ground/ Tee hee. Now I am regretting the open source idea.. (Just kidding). ZUBB's new home: http://www.bluewildfire.com/products/zubb/ BZ

3 2

Re: [Zope-dev] Re: [Zope] isecure XML-RPC handling.
by Oliver Bleutgen 03 Apr '02

03 Apr '02

R. David Murray wrote: > On Tue, 2 Apr 2002, Eron Lloyd wrote: > >>The problem here seems to be that you are trying to do XML-RPC communication >>with a version of Zope that doesn't support XML-RPC out of the box. You >> > > I think most people missed the point here. I don't think Rossen > is asking for help on running zope or getting xml-rpc to work with > it. He's observed a "security" problem: he believes the fact that > a traceback including path names is included in the error response > is a security exposure. This has been discussed on zope-dev before, > but the fact remains that the security community *does* treat > exposure of filesystem path information as a security issue. > > I believe the addition of the variable to control what happens with > tracebacks addresses this issue from a security standpoint, which > is probably all that Rossen cares about with regards to letting > bugtraq know that "the security bug has been fixed". Just to add some weight to this point, let's search google: http://www.google.com/search?q=%22path+disclosure+vulnerability%22 I don't care too much about this bug (let's call it a bug), but it indeed has enough weight to get zope quite a bad reputation in the security community. Oh, and each and every instance of these "vulnerabilities" got patched by the vendors, so they seem to take it seriously also. cheers, oliver

1 0

RE: [Zope] unix security patch
by Dunigan, Craig 03 Apr '02

03 Apr '02

Toby's point still applies. In order to run on a privileged port, zope must be started as root. I have another question for you, though. Are you sure you installed zope with the -u switch to tell it that you would be running it as a non-privileged user? Something like './install -u zope -g zopegroup' for the binary version? That could account for what you're seeing. Even so, it still must be started as root in order to use port 80. There's just no way around that. > -----Original Message----- > From: notices name [mailto:notices@fiberfolk.com] > Sent: Wednesday, April 03, 2002 5:43 AM > To: tdickenson(a)geminidataloggers.com; notices(a)fiberfolk.com > Cc: zope(a)zope.org > Subject: Re: [Zope] unix security patch > > > I believe I want -u zope because I don't have Apache, zope is > the web server. > So zope has to serve on port 80. Thanks, > Annie > > --- Toby Dickenson <tdickenson(a)devmail.geminidataloggers.co.uk> wrote: > >On Tue, 2 Apr 2002 09:43:42 -0800 (PST), notices name > ><notices(a)fiberfolk.com> wrote: > > > >>and then I edited start to add -u zope > > > >that means zope is going to *change* to the new user. It can only do > >that if started as root. This is a little more difficult to set up, > >but necessary if (and only if) you want zope to listen on a low > >numbered port (80, 21, etc) > > > >An alternative is to change to that new user before starting zope. > >Then you dont need any -u switch, but you have to use a high numbered > >port (such as 8080) > > > > > > > >Toby Dickenson > >tdickenson(a)geminidataloggers.com > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Zope] xml-rpc with Java - binary data
by Bak ＠ kedai 03 Apr '02

03 Apr '02

>i have a little big Problem with the xml-rpc in Zope. Is it possible to >transport binary Data (e.g. Images) with xml-rpc to a Java-Client ? I have we cant marshall binaries with xml-rpc convert it to string first, methinks uuencode would convert bins to string, if i'm not mistaken hth

1 0