October 2005 - Zope - Zope lists

ZEO client authentication
by Mika, David P (Research) 04 Oct '05

04 Oct '05

I see that ZEO supports a simple digest authenitcation of clients and that this is set in the zeo's config file with the keys: authentication-protocol, authentication-database and authentication-realm. Further, I can see that a client can connect using e.g. ZEO.ClientStorage with arguments for a userid & password (set in the ZEO authentication database). However, how does one configure Zope (as a client to the ZEO server) to use this authentication? I see nothing in the Zope config file. Somehow Zope must be able to pass a valid userid and password in the authentication database to ZEO. Dave

3 2

Re: [Zope] python: calling DTML-methods without quoting
by Chris 04 Oct '05

04 Oct '05

Hi Peter, >><dtml-with "somePath.someDTML"> >> <dtml-var foo> >></dtml-with> > > Now I'm very confused. What the heck is "someDTML" and what is "foo". > I thought "someDTML" was a DTML Method/Document. Then what is foo? Sorry, my fault. This should read <dtml-with "somePath"> <dtml-var someDTML> </dtml-with> > I could be wrong but it seems your DTML usage is flawed. Then yes, > you'll have to write some regular expression scripts that recodes them > to call templates the correct way. This would be no problem. However I need zope to do this automatically so I don't have to change the dtml-var calls in the customer's code. So my thought is to alter the __call__ method of DTMLMethod.py which is kind of ugly in case I want to update Zope later on. > PS. Do you need convincing that Page Templates are better than DTML > for HTML stuff? I KNOW that :-) I don't use DTML myself. As I said I try to get a customer's stuff run on a curent version of zope. I would love to clean up his stuff and convert is to tal. Regards Chris

2 1

Is signs not supported as password character?
by OGURA Toshiyuki 04 Oct '05

04 Oct '05

Hello. I installed Zope 3.1.0 final on my Linux system. I found that it seems that Zope fails to start if you specify sign characters (not letters or numbers) as Manager's password. Is this correct? -- OGURA Toshiyuki

2 2

phpBB conversion to Zope/Plone discussion product?
by Reinoud van Leeuwen 04 Oct '05

04 Oct '05

Hi, In the process of converting old systems to our new Plone intranet, I have come across an old phpBB forum. Has anyone converted a board like this to Ploneboard or another Zope or Plone based discussion system? Of course there will be some differences in possibilities, but converting the content would be a nice step. -- __________________________________________________ "Nothing is as subjective as reality" Reinoud van Leeuwen reinoud.v(a)n.leeuwen.net http://www.xs4all.nl/~reinoud __________________________________________________

2 1

Re: [Zope] Presentations Available
by Akbar 04 Oct '05

04 Oct '05

On 10/4/05, David Cake <dave(a)difference.com.au> wrote: > > We don't all run presentation software, either. If you just > want to review a presentation rather than create/edit it, a format > like PDF can be a better choice, and that applies regardless of how > you feel about Microsoft. > Effectively, what you are saying to many people is 'rather > than use a viewer app you already have, to view this you will need to > download a multi-megabyte office suit just to look at it'. If you > don't see that as a problem, well, its still a problem. > Cheers > David https://oooview.dev.java.net/

1 0

Aquisition, UserFolder and security
by bruno modulix 04 Oct '05

04 Oct '05

Hello hi I have a little problem with aquisition and security. We have a project using multiple CPS instances (for those that don't know CPS, it's a CMF based groupware/CMS) running in the same Zope instance, and being siblings of each others [1]. One of these instances is the main entry point for the portal (I'll all it the 'portal'), the others are acting as workspaces for dedicated communities (I'll call them CPMs). Each CPS instance has its own UserFolder. All users exists in the portal's UserFolder, but only exists in some CPMs UserFolders. Now the problem is that, due to acquisition, a member existing in the Portal but not in a given CPM can gain access to this CPM by faking the url - ie: going to mydomain.tld/portal/cpm instead of mydomain.tld/cpm. So we have a potential (err...) security hole here, that I would like to address ASAP. We've been thinking of using apache's rewrite rules, but since the customer will have the possibilitie to create new CPMs at will, this won't do. Idem for using subdomains, or anything implying the modification of apache conf. So we must fix the problem inside Zope itself. I searched the doc, this list's archive and the source code, and it seems that possible solutions involve playing with __bobo_traverse__ or __before_publishing_traverse__, but my (very naive) try didn't make it, so I'd really enjoy any hint and/or pointers about howtos, do's and don't, or any other resource concerning these hooks. Another thing I've been thinking of, reading BasicUserFolder's source, would be to subclass it and redefine the _isTop() method so users wouldn't been looked up for in a UserFolder placed in the context by acquisition, but I don't know enough about the whole mechanism to be sure it would'nt have unwanted side-effects and drawbacks. It's also very possible that I missed another simpler and better solution, so here again, any hint, pointer etc is *very* welcome. TIA [1] don't tell me, I know this is far from the best possible architecture, but that's the only one that we could think of that would let us meet the deadline. CPS Workspaces did not offer enough functionalities to be used for CPMs, and we need a tight integration between the Portal and CPMs. -- Bruno Desthuilliers Développeur bruno(a)modulix.org

9 30

Re: AW: [Zope] Zope Debugger lets WingDbg fail to connect to client
by Chris Withers 04 Oct '05

04 Oct '05

Hi Peter, Frey, Peter wrote: >>>When the WingIDE Zope-Product WingDbg is installed (and working), >> >>Does WingDbg ship with its source code? > > yes, it does, at least in the professional version > I am not sure about the light one Any chance I could get you to email me that off-list so I can see about making the two compatible? >>If so, I'd be interested to see >>it to see how the two products are treading on each other... > > the WingDbg uses a monkey patch mechanism to hook into debugging Python Scripts > namly it overwrites > > PythonScript.__init__ > PythonScript._compile > PythonScript.write > PythonScript.read > > and, if FSPythonScript is available, also: > > FSPythonScript._createZODBClone > FSPythonScript._write Ah, right, and you'll see that zdb monkey patches: PythonScript._exec PythonScript._compiler FSPythonScript._write To debug this, what I'd suggest putting: import pdb; pdb.set_trace() (NB: that's pdb, NOT zdb) ...somewhere such that you can step through and see which monkeypath methods are getting called. Print statements may also work ;-) Once we've got that figured out, I can see about getting zdb to work around Wing's stuff, if it's there... The problem is that I don't use Wing and so can't try this out... > I assume that your product may be more flexible in respect to non-filesystem-based PythonScripts > but I have not succeeded testing it as I ran into a AttributeError "Zdb instance has no attribute '_wait_for_mainpyfile'" Ah, now that sounds like another clue. This might well be the problem with Wing, can you give me the full traceback from when you saw this? > (I am now not sure if this was due to the fact that I have the WingDbg installed, or if it was because I was attempting to debug > filesystem based product code while Zope was not yet fully initialized, I had to find the cause for a problem with Zope starting > in Debug Mode with debug-mode in the config set to off) This is likely a wing problem... > when I find time and see more clearer why Zope Debugger and WingDbg fail together (maybe it was configuration specific ...) > I will let you know and ask Stephan/John from Wingware if the problem is known. Well, there IS a known problem: the one you're reporting ;-) Would be good to knock heads wit hthe Wingware guys and see if we can come up with a way to make the products compatible... > WingDbg failes to connect back to the WingIDE client, no error message, the client just does not get contacted by the server Well, when did you see the _wait_for_mainpyfile error? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

Zope restart fails
by John Poltorak 03 Oct '05

03 Oct '05

Following a server restart in the last couple of days I have been unable to get Zope started. Is there anything in particular I should check for? Until the reboot Zope had been running for months without a problem, although it may not have been stopped correctly before the reboot. Should I need to delete any lockfiles that may have been left in existance or should they get deleted on restart? -- John

4 4

Zope 3.1.0 released!
by Stephan Richter 03 Oct '05

03 Oct '05

Hello everyone, The Zope 3 development team is proud to announce Zope 3.1.0 final. Zope 3 is the next major Zope release and has been written from scratch based on the latest software design patterns and the experiences of Zope 2. It is in our opinion that Zope 3.1 is more than ready for production use, which is why we decided to drop the 'X' for experimental from the name. We will also continue to work on making the transition between Zope 2 and Zope 3 as smooth as possible. As a first step, Zope 2.8 includes Zope 3 features in the form of Five. Now that we have a release that we would like to declare stable next week, we are looking for translators, who translate Zope 3 into their favorite language! We are utilizing the Rosetta system from Ubuntu for managing those translations. If you are not familiar with Rosetta, please send us a mail to zope3-dev(a)zope.org and we get you set up. Downloads http://zope.org/Products/Zope3/ Installation instructions for both Windows and Un*x/Linux are now available in the top level 'README.txt' file of the distribution. The binary installer is recommended for Windows. Zope 3.1 requires Python 2.3.5 or 2.4.1 to run. You must also have zlib installed on your system. Most Important Changes Since 3.0 - New Pluggable Authentication Utility (PAU), which is similar in philosophy to the Zope 2 PAS. The following features are available in the in the basic PAU facility: + Credentials Plugins: Basic HTTP Auth, Session + Authenticator Plugins: Principal Folder, Group Folder For a detailed description of the pluggable authentication utility, see 'zope/app/authentication/README.txt'. - Major simplifications to the component architecture: + Removal of the concept of a service. All outstanding services were converted to utilities: Error Reporting, FSSync, Authentication. + Site Managers are global and local now; adapters and utilties are directly registered with the site manager. Now global and local component registration and lookup behaves very similar. + Local registrations can now only have two states: active and inactive. This simplified the code so much, that 'zope.app.utility', 'zope.app.registration' and 'zope.app.site' were all merged into 'zope.app.component'. + Implemented menus as utilities. The API also supports sub-menus now. + Implemented views as adapters. Skins and layers are now simply interfaces that the request provides. - Added an integer-id facility for assigning integer identifiers to objects. - Added basic catalog and index frameworks. - Added "sources", which are like vocabularies except that they support very large collections of values that must be searched, rather than browsed. - Created a new granting UI that allows advanced searching of principal sources. - Implemented a generic user preferences systsem that was designed to be easily used in TALES expressions and via Python code. Preferences can be edited via 'http://localhost:8080/++preferences++/'. A demo of the preferences can be found at:: http://svn.zope.org/Zope3/trunk/src/zope/app/demo/skinpref/ - ZCML now supports conditional directives using the 'zcml:condition' attribute. The condition is of the form "verb argument". Two verbs, 'have feature' and 'installed module' are currently implemented. Features can be declared via the 'meta:provides' directive. - Improved API doctool: Code Browser now shows interfaces, text files and ZCML files; the new Book Module compiles all available doctext files into an organized book; the new Type Module lets you browser all interface types and discover interfaces that provide types; views are shown in the interface details screen; views and adapters are categorized into specific, extended and generic; user preferences allow you to customize certain views; 3rd party modules can now be added to the Code Browser. - Improved I18n-based number and datetime formatting by integrating 'pytz' for timezone support, implementing all missing format characters, and reinterpreting the ICU documentation to correctly parse patterns. - Added '++debug++' traversal adapter that allows you to turn on debugging flags in 'request.debug'. Currently the following flags are defined: source, tal, errors. - Improved logout support. - Developed a generic 'browser:form' directive. It is pretty much the same as the 'browser:editform' directive, except that the data is not stored on some context or adapted context but sent as a dictionary to special method (by default). For a complete list of changes see the 'CHANGES.txt' file. Resources - "Zope 3 Development Web Site":http://dev.zope.org/Zope3 - "Zope 3 Dev Mailing List":http://mail.zope.org/mailman/listinfo/zope3-dev - "Zope 3 Users Mailing List":http://mail.zope.org/mailman/listinfo/zope3-users - IRC Channel: #zope3-dev at irc.freenode.net Acknowledgments Thanks goes to everyone that contributed. Enjoy! The Zope 3 Development Team

5 4

Plone update
by Michael Kaplan 02 Oct '05

02 Oct '05

I'm running Plone 2.0.5 with Zope 2.7.7-final and tried to upgrade to Plone 2.1. A dry-run of portal_migration stopped with errors : Products/ATContentTypes/migration/common.py", line 105, in unrestricted_rename action ='manage_main') Copy Error: <HTML> <HEAD> <TITLE>Invalid Id</TITLE> </HEAD> <BODY BGCOLOR="#FFFFFF"> <FORM ACTION="manage_main" METHOD="GET" > <TABLE BORDER="0" WIDTH="100%" CELLPADDING="10"> <TR> <TD VALIGN="TOP"> <BR> <CENTER><B><FONT SIZE="+6" COLOR="#77003B">!</FONT></B></CENTER> </TD> <TD VALIGN="TOP"> <BR><BR> <CENTER> The id "de_MIGRATION_" is not allowed. </CENTER> </TD> </TR> <TR> <TD VALIGN="TOP"> </TD> <TD VALIGN="TOP"> <CENTER> <INPUT TYPE="SUBMIT" VALUE=" Ok "> </CENTER> </TD> </TR> </TABLE> </FORM> </BODY></HTML> ... ... The upgrade path did NOT reach current version Migration has failed What's wrong here? Every hint is welcome.

3 3