June 2004 - Zope - Zope lists

Zope, Squid and manage_workspace
by Eddie Butcher 14 Jun '04

14 Jun '04

I've been pulling my hair out over this one for some time now and followed-up all the appropriate search queries and FAQs etc. With no luck. I now humbly ask help from the assembled crowd. Platform: Zope 2.7.1b1 on Redhat 7.3/i386 "Zope/(unreleased version, python 2.3.3, linux2) ZServer/1.1 Plone/2.0.3" I'm setting up a new ZOPE based site, the world can see it fine and I can manage it as normal. So far so good. If I try the same from inside my company network, all seems to go to plan, until I call /manage_workspace against any object, then I get no response returned. The bizarre thing is I can call /manage_main against anything, no problem. ONLY /manage_workspace fails. The only difference between world access and internal access that I can figure out is our company squid proxy. This is not being used as a local HTTP accelerator for ZOPE but as a simple mandatory company-wide proxy for all web traffic. >From grepping the squid.log it seems that squid forwards the request to the ZOPE server fine but never receives or acknowledges the ZOPE reply. Just as a comparison, using an Apache front-end to ZOPE with ProxyPass works fine (dunno why), but I can't pursue this as a solution as it cannot be seen externally to the company, again dunno why :-( Can anyone shed light on this please, any similar experiences? -- Eddie

4 7

RE: [Zope] Access Permission by Domain and without Login?
by Passin, Tom 14 Jun '04

14 Jun '04

> From: zope-bounces(a)zope.org [mailto:zope-bounces@zope.org] On > Those can be spoofed as well. There's no increased security there. Yes, but... In this case the customer wants (or thinks it is wanted) this kind of capability, and the security does not have to be the very highest. Many web servers let you set this kind of restriction. Of course, having authenticated users be members of groups with the restricted role is more secure, but it does require that each person join and be manually assigned to the select group. The scenario here is that anyone coming in from, say, noaa.gov, would be allowed to access a form that is not supposed to be open to the general public. Most of these people would not be members of the site. If a few determined people hacked up their packets with forged addresses and thereby got to the form, no harm would be done. The only reason for the restriction is that the client does not want to have to sort through spurious submissions from people who are not involved with the process. Cheers, Tom P > On Jun 14, 2004, at 10:57 AM, Passin, Tom wrote: > > > I asked for suggestions on restricting access to otherwise > > anonymously-accessable pages and methods. It has been > pointed out to > > me off line that that restriction by domain *name* can have security > > problems. But my terminology was misleading, becaues that > is not quite > > what I had in mind. > > > > I am asking about restriction by specific IP number ranges, like > > 140.90.*.*, not by domain *name*. > > > > Cheers, > > > > Tom P > > > >> > >> For a Zope 2.7/Plone 2 site, I would like to restrict > >> (otherwise) anonymous access to certain specific pages or > methods to > >> people making the request from specific domains. I know that I can > >> specify a domain for a particular user, but I want this to > apply to > >> anyone, without any special per-user configuration, and without > >> requiring a login. > >> > >> Also I want to do this without putting Zope behind Apache or any > >> other proxy, if this is possible. > >> > >> I don't recall seeing this discussed. Does anyone have > suggestions > >> as to how to accomplish this? > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://mail.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > http://mail.zope.org/mailman/listinfo/zo> pe-announce > > > http://mail.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

2 1

We're Sorry
by csiberica＠symantec.com 14 Jun '04

14 Jun '04

Le comunicamos que a partir de 19 de Julio este buzon de correo electronico dejara de estar activo. Para enviar un mensaje online a Atencion al Cliente, utilice la direccion: http://www.symantec.com/csemea y elija Espaqol Consultas No-Tecnica Servicio de Atencion al Cliente Symantec Ltd

1 0

save on v!@gr@
by Jerri Spraggs 14 Jun '04

14 Jun '04

Did you know that a lot of professional athletes take it to boost performance? Detailed instructions are included with each order. Place your order today. It will be one of the best decisions of the year. Tameka Roses http://g.msn.com/0US!s9.Qwvx/MY.Aw?http://www.lowcostgeneric.com If you are not planning to use this type of service in the future, press this line: http://g.msn.com/0US!s9.Prbrf/MY.Vip?http://lowcostgeneric.com n5Jrkyej

1 0

session problems...
by Bruno Silva 14 Jun '04

14 Jun '04

Hi, I'm developing a web site, with the usual register and authentication options. I'm using the zope session and the postgresql database to store users. When a user log in, i set a value in the session that tells who is he. Maybe is a better way to do this, but i don't know, yet... newbie :-) The problem is, that for some reason, in internet explorer, sometimes happens to lose the session, it doesn't store the cookie. For example, a user log in with valid credentials, i set the session value, and behaves normally, but if then he goes to any other link, he is logged out, with no session. I have to close all the IE windows, and open again to log in. This case only happens in IE, and usual once a day. One more newbie question. I want to define some dictionary constants, the way i'm doing right now, is a python script, that returns the dictionary, is there a better way to do this? thanks, --Bruno

1 0

RES: [Zope] need help
by Jose Henrique dos Reis 14 Jun '04

14 Jun '04

You can get what you want using the request API. The request object encapsulates all of the information regarding the current request in Zope. This includes, the input headers, form data, server data, and cookies. -----Mensagem original----- De: Parimal [mailto:parimalk@cdacindia.com] Enviada em: segunda-feira, 14 de junho de 2004 06:31 Para: Zope user list Assunto: [Zope] need help Dear All. I just started development in ZOPE. can any one help me to find out contain of variable in another file? For Example. Test_html contains list of the text box in user is suppose to enter information. and when he press submit post method has been called and it goes to python script test_python In this script there are some operation get executed and a local variable(final_var) gets the information now i need to refer the string in another document lets called it as second_html. So i want to read the information from final_var and display in table format. Please if some one can help me . Thank you for your help. _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] LocalFS - Allow View of Files, Disallow Browse of dir ectories
by Samir Mishra 14 Jun '04

14 Jun '04

I have the CVS version of LocalFS. As for a solution to my problem, I resolved it by defining the 'default_document' property as blank.html, which I create in each target local directory with 'touch blank.html' -----Original Message----- From: Andreas Heckel [mailto:andreas@easyleading.org] Sent: Tuesday, June 08, 2004 16:42 To: Samir Mishra Cc: 'zope(a)zope.org' Subject: Re: [Zope] LocalFS - Allow View of Files, Disallow Browse of directories What version are you using? Try to checkout the cvs version at: http://cvs.easyleading.org/browse/LocalFS/LocalFS.tar.gz?tarball=1 Greetings Andreas Heckel http://www.easyleading.org/ Samir Mishra wrote: > Hello all, > > I'm trying to set up LocalFS folders in Zope that will allow anonymous users > to access contents of individual files in the folder, but they will not be > able to browse the directory. Something like Apache, and what it does with > the icons directory. > > Thanks. > > Samir

2 2

exUserFolder cookie and basic authentication
by Ulrich Wisser 14 Jun '04

14 Jun '04

Hi, I have a Zope application which uses exUserFolder with cookie based authentication. Now I want to use XML-RPC calls. My XML-RPC client does not support cookies, but basic authentication. Any ideas how I can get exUserFolder to accept basic authentication and cookie authentication? Thanks Ulrich

2 1

RE: [Zope] zope 2.7 + debian + py2.3.3 + zlib
by Meilicke, Scott 14 Jun '04

14 Jun '04

You can also find it here: http://www.gzip.org/zlib/ Follow the install instructions in the top level readme - essential make, make install. Then compile python, then install zope. -Scott -----Original Message----- From: David Convent [mailto:david.convent@naturalsciences.be] Sent: Monday, June 14, 2004 5:09 AM To: fowlertrainer(a)anonym.hu Cc: python-list(a)python.org; zope(a)zope.org Subject: Re: [Zope] zope 2.7 + debian + py2.3.3 + zlib fowlertrainer(a)anonym.hu wrote: > Hi ! > > I want to install zope 2.7.0. > But it needs py2.3.3. > Ok, I compile it in Debian linux, and I try to configure zope 2.7. > But it is say to me: the zlib module is cannot be found. > > 1. Where I found this module ? i personnaly took it from the package distrib of python 2.3.3 and copied it in the same directory of the compiled python. It worked fine > 2. Why don't exists this module in py2.3.3 (in 2.1 exists !) I can't answer that and would also like to get some information about it > 3. How to I install it ? > > thanx for any help: > FT > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) > > . > -- David Convent _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) The information contained in this email message may be privileged and is confidential information intended only for the use of the recipient or any employee or agent responsible for delivering it to the intended recipient. Any unauthorized use, distribution or copying of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately and destroy the original message and all attachments from your electronic files.

1 0

zope 2.7 + debian + py2.3.3 + zlib
by fowlertrainer＠anonym.hu 14 Jun '04

14 Jun '04

Hi ! I want to install zope 2.7.0. But it needs py2.3.3. Ok, I compile it in Debian linux, and I try to configure zope 2.7. But it is say to me: the zlib module is cannot be found. 1. Where I found this module ? 2. Why don't exists this module in py2.3.3 (in 2.1 exists !) 3. How to I install it ? thanx for any help: FT

3 2