July 2004 - Zope - Zope lists

Configuring ZOPE to use Apache users
by Gunther H.Weber 21 Jul '04

21 Jul '04

Hello everyone, I am trying to configure ZOPE to accept users authenticated by an Apache web server. (Mainly because I need to use a homebrew authentication service for which an Apache module is provided and maintained.) So far I have set up Apache (2.0.46) to access ZOPE (2.6.0) via FastCGI (as I couldn't get PCGI to run). The documentation in doc/WEBSERVER.txt explains how to set up Apache authentication via PCGI, but doesn't mention FastCGI in that paragraph. Is it at all possible to set up ZOPE to use remote users FastCGI? How would one do this. One of my problems is that the original server was set up by someone else and I need to make changes to the existing configuration. One problem may be that I did not find a file "access" in ZOPE's "var" directory. Naively I tried to create one containing just the name of a valid username on the Apache server folowed by a colon, in hope that Zope would use that. Still, I get two authentication requests, one by Apache and one by ZOPE. Where, except in the "var" directory could the "access" file reside? Any other ideas on what I am doing wrong? Any help would be greatly appreciated. Thank you. Gunther Weber

3 2

Zope/Upgrading & Change Management: Suggestions?
by Nagle, Robert 21 Jul '04

21 Jul '04

This is a basic question, but I'd like to hear some suggestions about fast, easy, and SAFE ways to do upgrading with zope and related products. What methods do you recommend? 1. What are some gotchas to be careful about? Where do the difficulties usually occur? 2. How can you ensure that you can revert back to the previous install? 3. How can I check for dependencies before doing an upgrade/install? 4. Is it necessary to backup the Data.fs everytime you update/upgrade things? 5. How do you keep a log of upgrades/patches? At the moment, I don't have a test/staging machine, so I'm doing changes on a "live machine." (That is not good, and it will soon change). Thanks. Robert Nagle

4 3

Re: [Plone-users] Private Zope/Plone Site - Insufficent_Privileges
by Chuck Amadi 21 Jul '04

21 Jul '04

Yes - it's working fine except a bit concerned about insufficient_privilleges . I as the external author was able to make amendments and view as a Manager and Owner - but is there a properties to double check the External authors privilleges . Cheers Chuck On Tue, 2004-07-20 at 11:51, Chandrakantha Nagaraja wrote: > Hi Chuck, > I am back to office :) thanks, hope you are doing well. > > -- cn > ======================= > ZeOmega > Southend road > Bangalore, India > Ph: 26632589 > http://www.zeomega.com > ====================== > > > Chuck Amadi wrote: > > >Cheers for checking > > > >Are you are of the or come across - insufficent_privileges prompt i am > >stil able to access the contents and view tab etc as the External Author > >will access to the pilot zope/plone site. > > > >Cheers > > > >Chuck > > > > > >On Mon, 2004-07-19 at 07:23, Chandrakantha Nagaraja wrote: > > > > > >>Hi chuck, > >> It is really cool hearing 'It worked' from you :) > >>zoobiotic.com is popping up for username and password :) > >> > >>-- cn > >>======================= > >>ZeOmega > >>Southend road > >>Bangalore, India > >>Ph: 26632589 > >>http://www.zeomega.com > >>====================== > >> > >> > >>Chuck Amadi wrote: > >> > >> > >> > >>>Hi Chandrakantha Nagaraja > >>> > >>>Just to say thanks It worked as you said with the simpliar solution. > >>> > >>>Created a Group for external authors to contribute once I get the pilot > >>>up and running as I only got a few bits and pieces ie.Company Logo and > >>>Front page blurb. > >>> > >>>www.zoobiotic.com > >>> > >>>Cheers > >>> > >>>Chuck > >>> > >>> > >>>On Thu, 2004-07-15 at 18:07, Chandrakantha Nagaraja wrote: > >>> > >>> > >>> > >>> > >>>>Hi Chuck, > >>>> Actually there are two solutions to your problem, one is playing > >>>>with work flow as you are doing now and another solution is pretty > >>>>simple and it should work for your case. > >>>>If you have 'View' permission then only you can view any object so what > >>>>I suggested was remove 'View' permission to 'Anonymous' role (go to root > >>>>of your portal and click on Security tab, you will find roles there) and > >>>>no Acquire (means you have to uncheck acquiring View permission to > >>>>Anonymous role and assign to other roles that you trust), since View > >>>>permission is removed to Anonymous role and it is not acquired, the site > >>>>will not be able to accessed by anonymous user, only the users with View > >>>>permission will be able to access the site. Hope this helps you. > >>>> > >>>> > >>>>PS: Sorry, I won't be there in the office for a couple of days. > >>>> > >>>>-- cn > >>>>======================= > >>>>ZeOmega > >>>>Southend road > >>>>Bangalore, India > >>>>Ph: 26632589 > >>>>http://www.zeomega.com > >>>>====================== > >>>> > >>>> > >>>> > >>>>Chuck Amadi wrote: > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>Hi Chandrakantha Nagaraja > >>>>> > >>>>>Sorry to email you directly , I have setp up VHM and Apache rewrites to > >>>>>my Zope/Plone site and trying to setup a Private Plone Site using the > >>>>>Doc's from the Url you sent me/Mailing list. > >>>>> > >>>>>I have gone thtu the neccessary steps but I'm a bit confused at this > >>>>>point below: > >>>>> > >>>>>portal_workflow > >>>>> > >>>>>Clicke on States tab > >>>>>For each stated listed > >>>>> > >>>>>[ private ] Visible and editable only by owner > >>>>> > >>>>>publish (Reviewer publishes content) > >>>>>show (Member makes content visible) > >>>>> > >>>>> > >>>>>[ published ] Public > >>>>>hide (Member makes content private) > >>>>>retract (Member retracts submission) > >>>>> > >>>>> > >>>>>[ * visible ] Visible but not published > >>>>>hide (Member makes content private) > >>>>>publish (Reviewer publishes content) > >>>>> > >>>>>Click on the state name (I clicked all three) > >>>>>Click on Permissions tab > >>>>>Change Anonymous checked areas to Authenticated and no Aquire at this > >>>>>point there was no Anonymous to check . > >>>>> > >>>>>The Permissions tab had the following: > >>>>> > >>>>>Access contents information > >>>>> > >>>>> > >>>>>[ List folder contents ] > >>>>> > >>>>>[ Modify portal content ] > >>>>> > >>>>>[ View ] > >>>>> > >>>>>Thus do I just check view and Remove Selected after I have checked all > >>>>>the states or just Public as the doc's just say Click on state name not > >>>>>names: > >>>>> > >>>>>As In the docs it says repeat this for all states . > >>>>> > >>>>>Cheers > >>>>> > >>>>>Chuck > >>>>> > >>>>>On Tue, 2004-07-13 at 13:21, Chandrakantha Nagaraja wrote: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>Please also visit this link for more info. > >>>>>>http://plone.org/documentation/howto/HowToCreateAPrivatePloneSite > >>>>>> > >>>>>>Hope that helps. > >>>>>> > >>>>>>-- cn > >>>>>>======================= > >>>>>>ZeOmega > >>>>>>Southend road > >>>>>>Bangalore, India > >>>>>>Ph: 26632589 > >>>>>>http://www.zeomega.com > >>>>>>====================== > >>>>>> > >>>>>> > >>>>>>Chuck Amadi wrote: > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>>>Hi All at Zope/Plone Mailing list. > >>>>>>> > >>>>>>>I have installed Zope.2.7.0 , Plone 2 ,VHM ,CMF 1.4 and Apache 2 on our > >>>>>>>new web server to be deployed on Linux o/s flavour - SuSE 8.2 Enterprise > >>>>>>>Server. > >>>>>>> > >>>>>>>Currently deployed is Zope 2.6.2 ,Plone RC2,VHM, CMF 1.4 and Apache 1.3. > >>>>>>> > >>>>>>>Anyway I have got my Zope/Plone Site up on the New Server but my problem > >>>>>>>is I need to deploy on the old and new web server a Plone Site in > >>>>>>>development that must only be accessable and viewable using the issuing > >>>>>>>user and password dteails only. > >>>>>>> > >>>>>>>I have done this similiar before for my previous employer for external > >>>>>>>content authoring for zope manager's but this time the Plone site in > >>>>>>>particular shouldn't be viewable to the public only a few editors and > >>>>>>>myself while we work on the Plone site but I need external contributors > >>>>>>>to make additions to the Plone site but not viewable to the general > >>>>>>>public. > >>>>>>> > >>>>>>>Is at all possible for both versions to allow this if So please could > >>>>>>>someone point me in the right direction. > >>>>>>> > >>>>>>>Cheers > >>>>>>> > >>>>>>>Chuck > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> -- Chuck Amadi, Systems Administrator, | http://www.smtl.co.uk/ Surgical Materials Testing Lab, | http://www.worldwidewounds.com/ Princess of Wales Hospital, S Wales | http://www.dressings.org/ Tel/Fax: +44 1656-752820 | chuck(a)smtl.co.uk

2 1

The immortal POSKeyError
by george donnelly 21 Jul '04

21 Jul '04

hi I found an entire hierarchy had gone POSKeyError on me today, and the bad folder hierarchy resists deletion. below is a transcript of the session, BadFolder is the first inaccessible folder. it has a lot of peer folder that i don't want to lose. This is Zope 2.7.0 and Python 2.3.3. The ZODB is about 1.5GB and some parts of it have been upgraded over time from as early as zope 2.4.x. fsrecover.py reports zero bytes removed. Since i can't delete it i am uncertain as to what to try next. thanks in advance for any suggestions. zopectl debug <snip> >>> >>> from Zope import app >>> from ZODB import POSException >>> from OFS import DTMLMethod >>> from OFS import Folder >>> from AccessControl import User >>> root= app() >>> obj= root.unrestrictedTraverse('/BTreeFolder/BadFolder') >>> obj.manage_delObjects('SoleObjectOfBadFolder') Traceback (most recent call last): File "<stdin>", line 1, in ? File "/home/bradc/zope/270/lib/python/ZODB/Connection.py", line 561, in setstate p, serial = self._storage.load(oid, self._version) File "/home/bradc/zope/270/lib/python/ZODB/FileStorage.py", line 687, in load return self._load(oid, version, self._index, self._file) File "/home/bradc/zope/270/lib/python/ZODB/FileStorage.py", line 655, in _load raise POSKeyError(oid) ZODB.POSException.POSKeyError: 00000000001ae582 <--> george donnelly ~ http://www.zettai.net/ ~ "Quality Zope Hosting" Shared and Dedicated Zope Hosting ~ Zope Servers ~ Zope Websites Yahoo, AIM: zettainet ~ ICQ: 51907738 ~ Sales (USA): 1-866-967-3669

6 10

Re: [Zope] Hi + question
by Rodrigo Senra 21 Jul '04

21 Jul '04

| Date: Sat, 17 Jul 2004 05:45:53 +0200 | From: Andreas Jung <lists(a)andreas-jung.com> | To: Steven Hodgen <shodgen(a)solomonschool.com>, zope(a)zope.org | Cc: | Subject: Re: [Zope] Hi + question | | - don't run Zope as server on the internet *without* any reverse proxy like | squid or apache Hi, Could anybody expand on that ? I thought it would be perfectly safe to run Zope on the Internet. What is behind this claim ? - Concerns with caching - Handling bad formatted http - Speed TIA, Rod -- Rodrigo Senra MSc Computer Engineer rodsenra(a)gpr.com.br GPr Sistemas Ltda http://www.gpr.com.br

3 2

Login problem
by Josef Meile 21 Jul '04

21 Jul '04

Hi, > I'm using zope 2.6.2b5 and I'm having trouble logging on (using > exUserFolder). After entering user name, password, and hitting submit > - >the screen redirects back to the login screen with no error > statement about bad user name or password. I'm only getting the > problem on one of my installs - it used to work just fine but suddenly > stopped! I don't think anything has changed on the machine. Anyone > got any ideas? Are you using CookieCrumbler authentication with your user folder? If so, check that there is an instance on the root of your zope. Once I had also the same problem, then I realized that the CookieCrumbler was missing. Regards, Josef

1 0

zope ftp and firewall
by robert rottermann 21 Jul '04

21 Jul '04

Hi there, For some time (since I updated to 2.7) I can not reach my sites that are behind a firewall. Both, client and server use Linux (SuSe 9.1 and 8.2) Here a typical session: robert@salome:~> ftp salome.redcor.net 8121 Connected to zope3.aemmenet.ch. 220 zope3 FTP server (Medusa Async V1.23 [experimental]) ready. Name (salome.redcor.net:robert): 331 Password required. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> passive Passive mode: off; fallback to active mode: off. ftp> passive on Passive mode: on; fallback to active mode: off. ftp> ls 500 'EPSV': command not understood. 227 Entering Passive Mode (193,246,254,160,67,11) And then nothing happens anymore.. From the FTP documentation I learned that passive FTP negotiates a second control board which is in the case of the given example 67 * 256 +11 = 17163. This port is blocked by the firewall. I do not know who is setting this port (client or server) and how to control the range from which is selected. Any help is appreciated Robert

2 1

RE: [Zope] ZPT Help!
by Michael Fox 21 Jul '04

21 Jul '04

Not exactly... I define something called 'image' and display it using the following code. <img tal:attributes="src image" /> "id" being the id of my ZPT, with a .jpg extension to display an image which shares the same id as a ZPT but with a .jpg extension. But what I want to test is if the 'image' object does not exist within the ZODB ... and display a "no image", image. no image But the above doesn't work. -----Original Message----- From: Dragos Chirila [mailto:d.chirila@finsiel.ro] Sent: Tuesday, 20 July 2004 5:58 PM To: zope(a)zope.org; Michael Fox Subject: Re: [Zope] ZPT Help! If I understand corectly, you can have zpts without a coressponding image, but you cannot have an image without a corresponding zpt. If so, here is the piece of code that does the job: <tal:block repeat="item python:here.objectValues('Image')"> <tal:block define="zpt python:here[item.getId().replace('.jpg', '')]"> Page Template: Image: </tal:block> </tal:block> So, iterate over all images in the folder. Extract the name of the zpt by removing the '.jpg' extension from the image id. Display the content of the zpt and then the image. Hope this will help, Dragos Michael Fox wrote: > Hi *, > > I have a folder which contains a bunch of ZPT's and images, some of > which share the same unique ID as a ZPT which a ".jpg" extension. ie. > > 1000 > 1000.jpg > 1001 > 1002 > 1003 > 1004.jpg > 1004 > > I have an index_html object which will render any ZPT in this > directory and the matching image, if available. > > If there is no matching image I want to display an "image > unavailable", but can't get this to work. > > > > > > > There are currently no items available. > > > > > Regards, > > Michael Fox ^-^ > Analyst/Programmer <`-`> ___ > Century Software ' `' '. > Tel +61 2 9460 1422 `. ` ' .'. > Fax +61 2 9460 3098 ||.' '._/'.`.' > www.CenturySoftware.com.au "" " > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) >

1 0

restrictedTraverse Info
by Jonathan Cyr 20 Jul '04

20 Jul '04

Hello, I keep reading about restrictedTraverse, is there a resource with a simple introduction and/or example of using this tool? Google doesn't yield any overviews, just specific questions. I have a problem were I have a path of a photo stored, but I'd like to get the title as well... This tool seems to do that, but I don't know the usage. -Jon Cyr

2 1

Model-View-Controller in Zope
by Paolo Bizzarri 20 Jul '04

20 Jul '04

Hi everyone, we are trying to implement a concept like Model-View-Controller in our application, PAFlow. PAFlow is an open source application for document tracking in public administrations. So it includes a lot of forms, in which users have complex interaction with the application itself. We have been increasingly in difficult in using the traditional Zope approach, based on contents that present themselves to the user. Our interaction was (and is) more rich and more structured than the traditional interaction with a standard web content. Based on this, we have started developing a sort of Controller object, that is in charge of interacting with the user. Basically, a Controller is behind a complex web page (for example, the selection of products for a shopping cart). A Page Template is in charge of making the HTML rendering, without any specific business logic. The advantages are many: - good domain model for our system, (no presentation code); - all the presentation logic in the controller; - no presentation logic in the page template associated; - no business logic in the page template (only getMethods from the controller); - all references from the template are to the controller only; - no need to pass arguments in hidden fields or in the URL; - real objects, not fields in a session, for storing information. The only real doubt is that this approach seems not really Zopish, so we were wondering if there are other, more Zopish way of doing things. Best regards. Paolo -- Paolo Bizzarri - President - Icube S.r.l. Address: Via Ridolfi 15 - 56124 Pisa (PI), Italy E-mail: p.bizzarri(a)icube.it Web: http://www.icube.it Phone: (+39) 050 97 02 07 Fax: (+39) 050 31 36 588

3 3