April 2006 - Zope - Zope lists

python 2.4.3
by David Bear 04 Apr '06

04 Apr '06

Since python 2.4.3 has just been released, are there any comments/recommendatiosn about running zope 2.9.2 with that version? The zope site and installed docs recommend python 2.4.2, but it appears the 2.4.3 is a nice bug fix release. it would be nice to be able to use it. -- David Bear What's the difference between private knowledge and public knowledge?

3 3

how to build a search date range parameter in a search form
by Lucia Colombo 04 Apr '06

04 Apr '06

Hi all I'm trying to build a search form which gets as an input a year and searches for all objects which have a (custom) date index set within such year. So after having built a list of the available years to query on, I added in the search form: <select name=" getAnno.query:record:list " id="getAnno" tabindex="" tal:attributes="tabindex tabindex/next;"> <tal:options repeat="year years_list"> <option value="#" tal:define="start_date python:DateTime(int(year), 1, 1); end_date python:DateTime(int(year), 12, 31); date_range python:[start_date, end_date];" tal:attributes="value date_range" tal:content="year"> 2000 </option> </tal:options> </select> <input type="hidden" name=" getAnno.range:record" value="minmax" /> (getAnno is my custom date index) but then I get into the query the string ["DateTime('2006/01/01'), DateTime('2006/12/31')"] instead of the list of dates. Actually what I get is a syntaz error, as it is: getAnno {'query': ["[DateTime('2005/01/01'), DateTime('2005/12/31')]"], 'range': 'minmax'} How do I get the parameter to be a list of dates? thanks&bye Lucia

3 3

Question about Zope and security
by Cyrille Bonnet 03 Apr '06

03 Apr '06

Hi there, I have been telling all my clients about how great Zope is for security: fine-grained permissions, security framework, roles, etc. Now, one of my clients has a security expert who took a close look at how Zope authenticates users. The results were not good. The main problem is that Zope stores the username and password in a cookie in clear text (base64 encoded). Even though it only happens in their internal network, my client wasn't too happy, because it makes them vulnerable to a man-in-the-middle attack. I know, the odds of that happening are low, but storing the username and password in clear text is clearly not best practice. So, my question is: is there a way to secure Zope authentication? I did find Dieter Mauer's DigestAuth product: http://www.dieter.handshake.de/pyprojects/zope/#DigestAuth It looks good. I have used other produts from Dieter before and was very pleased with the quality of his code. Now, have other people used it? Does it work with WebDAV? How secure is it (I am no security/encryption expert)? Also, if it is good, why is not part of default Zope?? Finally, a little side story: you know how in Windows XP, you can connect a drive to a WebDAV server? Well, if you install Service Pack 2, you can't use that feature to connect to Zope anymore. Interestingly enough, it seems that it is precisely because of that authentication vlunerability: Win XP SP2 refuses to connect to a WebDAV that doesn't at least encode the username/password in Digest authentication... Any comment or pointers are very welcome. Cyrille

11 18

pass variables in a form
by Dean Hale 03 Apr '06

03 Apr '06

Hi, I hope this is the correct forum to add this query, and any help appreciated. I have the following zpt which pulls in the users userid - $uid and some text generated from a python script (myEV - $pass). It works fine however i need to pass the variables along in a form rather than a url. And i'm stuck. the zpt url <span tal:define="pass here/myEv"> <a href="" tal:define="uid python:member.getProperty('uid')" tal:attributes="href string:https://domain/siw_sso.signonUSER= $uid&TEXT=$pass" method="post">SSO test</a> </span> the form needs to be in a format similar to below <form method="post" action="https://domain/siw_sso.signon"> <input type="hidden" name="SSO" value="USER=ws0dha&HASH=daf768422238acd0899155a1757c9b5d"> This is a test of hardcoded single-signon <input type="submit" value="for ws0dha"> </form> so somehow i need to pass something like below <input type="hidden" name="SSO" value="USER=$uid&TEXT=$pass"> hope this makes sense and is it possible? thank you dean --------------- Dean Hale Web Development Manager Library Services University of Sunderland w: https://my.sunderland.ac.uk t: +44 (0) 191 515 2424 f: +44 (0) 191 515 2904

2 1

Debugging Zope on Windows
by kjzz.webmaster＠riomail.maricopa.edu 03 Apr '06

03 Apr '06

I am using Zope 2.5.0 (binary release, python 2.1, win32-x86), and the python 2.1.3 distribution of from python.org as a service on a Windows 2000 server. I have heard that there is a way to debug zope and save error messages to a text file using the "STUPID_LOG_FILE" parameter however I'm not clear on how to implement this. I have tried adding the the paramter, STUPID_LOG_FILE=Zope.log to the Z2.py file. I modified the command line parameters "C:\Python21\python.exe" "C:\PROGRA~1\Zope\z2.py" -S for the registry value at: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Zope\Parameters\start to "C:\Python21\python.exe" "C:\PROGRA~1\Zope\z2.py" -S -D STUPID_LOG_FILE=Zope.log or should this be "C:\Python21\python.exe" "C:\PROGRA~1\Zope\z2.py" -S -D EVENT_LOG_FILE=Zope.log ??? Still, when I restart Zope, I'm not seeing the log file. Does anyone know how I might set this up properly on a Windows Machine? Alternatively, has anyone configured the z2.py file (or windows registry) to use a syslog utility (such as the Kwiki Syslog Daemon), found here: http://www.kiwisyslog.com/info_syslog.htm Sincerely, John T.

4 3

Re: [Zope] zope and nagios
by Chris Withers 03 Apr '06

03 Apr '06

robert rottermann wrote: > nagios calls the intranet main page and checks if it finds "designed by > redCOR" in the response. > Somehow a "not responding" (vs not running) zope does not trigger the > nagios rule. Maybe you have an error page somewhere which also contains those words? Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk

1 0

Rotating Zope Log Files on Windows
by kjzz.webmaster＠riomail.maricopa.edu 03 Apr '06

03 Apr '06

I am using Zope 2.5.0 (binary release, python 2.1, win32-x86), and the python 2.1.3 distribution of from python.org as a service on a Windows 2000 server. I am looking for a solution to rotate zope log files on windows. I just started writing a batch file to accomplish this, and it seems to work fairly well: net stop ZOPE_INSTANCE_SERVICE_NAME FOR /f "tokens=6-8 delims=/ " %%G IN ('NET TIME \\%computername%') DO ( SET _mm=%%G SET _dd=%%H SET _yy=%%I ) FOR /f "tokens=1,2 delims=: " %%G IN ('time/t') DO ( SET _hr=%%G SET _min=%%H ) ECHO Today is Year: [%_yy%] Month: [%_mm%] Day: [%_dd%] ECHO The time is: [%_hr%]:[%_min%] REN "C:\Zope_2_8_1_instance\log\Z2.log" "%_file%-%_yy%-%_mm%-%_dd%(a)%_hr%-%_min%.log" del Z2.log rundll32.exe >C:\Zope_2_8_1_instance\log\Z2.log net start Zope net start ZOPE_INSTANCE_SERVICE_NAME I am thinking of using windows scheduler to run this every night at midnight. But I wonder if anyone else worked on a similar solution and could pass along any advice. Or, conversely, does anyone know how to configure Zope 2.5.0 to send information that would normally be saved to the Z2.log file to a syslog utility, (such as the Kwiki Syslog Daemon), found here: http://www.kiwisyslog.com/info_syslog.htm Sincerely, John T.

2 1

logging from external methods
by Jed Parsons 02 Apr '06

02 Apr '06

I'm trying to perform some logging from external methods. I've discovered that, if you're not careful, you get more and more loggers each time Zope reloads the module. This leads to an ever-increasing number of identical entries in the log file, whose timestamps all match down to the millisecond. Currently, thanks to the helpful folks on python-list, I've got it down to two entries per time. My goal is to get exactly one log entry per event logged :) Here's the code I'm using in an external module. I set up a global _logger instance that various methods in the module use: import logging _logger = logging.getLogger("lois.access") _logger.setLevel(logging.DEBUG) if not _logger.handlers: _handler = logging.FileHandler(os.path.join(LOG_ROOT, 'access.log')) _formatter = logging.Formatter("%(asctime)s %(name)s %(levelname)s: %(message)s") _handler.setFormatter(_formatter) _logger.addHandler(_handler) _logger.propagate = 0 Each time a method calls _logger.info("some event"), I get duplicate entries, like so: 2006-03-31 15:07:57,676 lois.access INFO: get wiki_ldap 0.html (jedp) 2006-03-31 15:07:57,676 lois.access INFO: get wiki_ldap 0.html (jedp) The _logger.handlers test is there to make sure I don't spawn a new handler each time the module gets reloaded. This makes a huge difference; without it, the number of duplicates grows and grows. Can anyone tell me how to get a logger to leave just one log entry from an external module? Many thanks. In perplexity, j -- Jed Parsons Industrial Light + Magic (415) 746-2974 grep(do{for(ord){(!$_&&print"$s\n")||(($O+=(($_-1)%6+1)and grep(vec($s,$O++,1)=1,1..int(($_-6*6-1)/6))))}},(split(//, "++,++2-27,280,481=1-7.1++2,800+++2,8310/1+4131+1++2,80\0. What!?")));

3 2

Strange behavior with TAL and python: expressions
by Floyd May 01 Apr '06

01 Apr '06

Great and mighty Zope gurus, I have a template which calls a macro. Within the template, I tal:define a variable, 'form'. Within the macro, the 'form' variable (which is an FSForm object) is defined as None unless I access it using python expressions. If I attempt to do anything with attributes of 'form', I get an AttributeError indicating that the NoneType object, form, doesn't have the attribute that I'm looking for. However, I can use 'form' any way I want inside the template that calls the macro. It seems that the macro call somehow lost part of the information associated with the 'form' variable. I worked around the problem by defining form using a python expression instead of a pure TALES expression. I was also able to work around the issue by accessing 'form' within the macro using python expressions instead of TALES. Why would this happen? Is this expected? I'm using Zope 2.7.5 and Formulator 1.9. I'm not sure what other products to list here; this seems like a ZPT-related thing. Please let me know if there is any more information I can provide. Thanks! -- Floyd May Senior Systems Analyst CTLN - CareerTech Learning Network fmay(a)okcareertech.org

3 2

Dependent List
by BKJ＠telefonica.net 01 Apr '06

01 Apr '06

Hello, I have a problem with my archetype, I'm using dependent lists. I've downloaded the MasterSelectWidget product, but I have a problem with it. In my archetype I have a master field and a slave one, I install the archetype, I add an object of this type to my portal, but when I load the saved object and try to edit it, I see that the slave field (a selection widget) don't have the value that I have selected. How can I solve it? Is there any alternative to MasterSelect widget? Thanks ! TERRA -->

3 2