May 2006 - Zope - Zope lists

apache rewrite rules redux
by David Bear 24 May '06

24 May '06

the more I try to get this to work, the less I understand. Sorry to bug these groups again, but I still need a little help. I would like my zope content (and plone) available to both http adn https urls. I went to betabug/zope/witch and was able to generate the following rule sets. # see http://betabug.ch/zope/witch RewriteRule ^/z2$ http://127.0.0.1:9080/VirtualHostBase/\ https/%SERVER_NAME}:80/VirtualHostRoot/_vh_z2/ [L,P] RewriteRule ^/z2/(.*) http://127.0.0.1:9080/VirtualHostBase/\ https/%{SERVER_NAME}:80/VirtualHostRoot/_vh_z2/$1 [L,P] RewriteRule ^/z2$ http://127.0.0.1:9080/VirtualHostBase/\ http/%SERVER_NAME}:80/VirtualHostRoot/_vh_z2/ [L,P] RewriteRule ^/z2/(.*) http://127.0.0.1:9080/VirtualHostBase/\ http/%{SERVER_NAME}:80/VirtualHostRoot/_vh_z2/$1 [L,P] The rules listed above only work to serve content from http://servername/z2.. They refuse to work for https://servername/z2 (that generates a not found error) Any other advice on make both urls work? I also found the following rule from scanning through zope-list postings, to force any logon authentication requests to go over https. However, since the above rules fail, the following does nothing. RewriteRule ^/login_form(.*) https://%{SERVER_NAME}/login_form$1 [NE,L] -- David Bear What's the difference between private knowledge and public knowledge?

3 2

Re: [Zope] RESPONSE.redirect not working
by Jo Meder 23 May '06

23 May '06

Am 24.05.2006, 00:24 Uhr schriebte Andrew Hedges <andrew(a)clearwired.com>: > I'm at my wit's end. Any help is appreciated. Yes, I have worn > Google out trying to figure this out. > > In my (yeah, yeah, I know) DTML method, I have structured things like > so: > > <dtml-call pyCheckSession> <-- a Python script that checks Hi there! Given your code in pyCheckSession try the following (not tested): <dtml-unless pyCheckSession> <dtml-return ""> </dtml-unless> and change pyCheckSession to: > if url <> '': > "If we have need to, bump the user out" > RESPONSE.redirect(url) return 0 .... else: .... return 1 The call to "redirect" doesn't magically stop processing of everything else you programmed. Hope it helps, Jo. -- internetmanufaktur jo----------------------------- Berlin, Germany |||||||||||||||meder------------------- fon: ++49-30-44 04 27 82 http://www.meder.de/ -------------------- fax: ++49-30-44 04 30 95 Kollwitzstr. 66 ------------------------ mob: ++49-170- 2 98 89 97 10435 Berlin ---------------http://www.meder.de/keys/jo-pubkey.txt

2 1

RESPONSE.redirect not working
by Andrew Hedges 23 May '06

23 May '06

I'm at my wit's end. Any help is appreciated. Yes, I have worn Google out trying to figure this out. In my (yeah, yeah, I know) DTML method, I have structured things like so: <dtml-call pyCheckSession> <-- a Python script that checks whether the user is allowed to see the page <dtml-var mvp_header> <-- header include ... Sundry HTML/DTML ... I am running Zope 2.9.2 and Python 2.4.2 on Mac OS X 10.4.6. I have the stock session manager objects installed (Transient Object Container, Session Data Manager, and Browser Id Manager). When I am not logged in and I go to an unauthorized page, the response location appears to get set as desired, but the redirect does not happen. Instead, the page from the original URL still renders (not very secure, I'd say). The URL I hit was: http://localhost:8080/www/nmact/MVP/website/mymvp_html Here are the relevant bits from pyCheckSession: request = container.REQUEST RESPONSE = request.RESPONSE session = request.SESSION url = '' if len(session.keys()) == 0: "User is not logged in" url = '/www/nmact/MVP/website/login_html' if url <> '': "If we have need to, bump the user out" RESPONSE.redirect(url) Here are the contents of the response object: HTTP/1.1 302 Moved Temporarily Server: Zope/(Zope 2.9.2-, python 2.4.2, darwin) ZServer/1.1 Date: Tue, 23 May 2006 22:05:51 GMT Content-Length: 0 Location: /www/nmact/MVP/website/login_html To reiterate, the response location appears to get set to login_html, but the content of mymvp_html still renders. What am I doing wrong? TIA, -Andrew ----- andrew(a)clearwired.com / http://clearwired.com

2 1

REMOTE_USER Security Issue
by Cliff Ford 22 May '06

22 May '06

My people want to adopt a single sign-on system for web applications that is based on the REMOTE_USER environment variable. I have tried out RemoteUserFolder and also adapted exUserFolder to work similarly. My problem is that I figured out how a user who has permission to create python scripts (might work with dtml and page templates too) could access otherwise forbidden content by making calls that pretend to come from another user. Has any one else come across this problem and devised a solution, either in software or organisation? Problem verified with Zope 2.9.2 and latest RemoteUserFolder. Cliff

8 15

Re: what is the tag to get Zope 2.8.x per svn
by robert rottermann 20 May '06

20 May '06

ohh, there seems to be missing much more.. I seem to need a bundle. Is there something like a Zope.2.8 bundle to get from svn.? tanks Robert robert rottermann wrote: > Thanks Tres and Andreas, > now I have the Zope-2_8-branch running, albeit without ZEO. > > I just did usual the configur make make install tripple. > > how would i convice the scripts also to make ZEO? > Or is there a separate ZEO to download (i did not find anything) > > tanks > robert > > > Tres Seaver wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> robert rottermann wrote: >> >>> I would like to get Zope 2.8.x per svn. (its head so to speak) >>> how can I do that >>> >> >> $ svn ls svn+ssh://svn.zope.org/repos/main/Zope/branches | grep 8 >> Zope-2_8-branch/ >> tseaver-2.8-external_test/ >> $ svn co \ >> svn+ssh://svn.zope.org/repos/main/Zope/branches/Zope-2_8-branch >> >> >> Tres. >> - -- >> =================================================================== >> Tres Seaver +1 202-558-7113 tseaver(a)palladion.com >> Palladion Software "Excellence by Design" http://palladion.com >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.1 (GNU/Linux) >> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org >> >> iD8DBQFEbevh+gerLs4ltQ4RAlHCAJ9ZwwBz1HX2LnaqqVsBX8wKaZMtTwCePNIR >> uio9yyWIhC3QE+E7MQ5DkG8= >> =t7GJ >> -----END PGP SIGNATURE----- >> >> >> >

2 3

what is the tag to get Zope 2.8.x per svn
by robert rottermann 19 May '06

19 May '06

I would like to get Zope 2.8.x per svn. (its head so to speak) how can I do that tahnks robert

3 2

windows python differences
by garry saddington 19 May '06

19 May '06

This code on linux works without a problem ispell = os.popen("echo " + word + | /opt/scholarpack/ancillary/ispell/bin/ispell -a") ispell.readline sentence = ispell.readline() if (sentence[0] == '&'): parts = string.split(sentence, ": ") gluedwords = parts[1] words = string.split(gluedwords,", ") length = len(words) words[length-1] = words[length-1][0:len(words[length-1]) - 1] return [word] + words elif (sentence[0] == '#') or (sentence[0] == '?'): return [word] else: return [] however on windows it throws a string index out of range at the sentence[0] constructs. the popen command on windows is: ispell=os.popen("echo" +word+ "\scholarpack\ancillary\ispell\bin\ispell -a") Anyone know what the difference is on the two platforms? regards garry

6 9

Chrooted zope /dev requirements?
by Michael Dexter 19 May '06

19 May '06

Hello, Has anyone chrooted Zope/Python on OpenBSD or other and determined what minimum devices are required for correct functionality? Willing to share? :) Thanks, Michael.

2 1

kupu and zope2 again
by Thomas Adams 18 May '06

18 May '06

-------- Original-Nachricht -------- From: - Sun May 14 18:05:10 2006 X-Account-Key: account2 X-UIDL: 0MKt1w-1FfJ541nXg-0002PK X-Mozilla-Status: 0001 X-Mozilla-Status2: 10000000 Return-Path: <zope-bounces(a)zope.org> Delivery-Date: Sun, 14 May 2006 18:04:30 +0200 Received-SPF: none (mxeu8: 63.240.213.173 is neither permitted nor denied by domain of zope.org) client-ip=63.240.213.173; envelope-from=zope-bounces(a)zope.org; helo=mail.zope.org; Received: from [63.240.213.173] (helo=mail.zope.org) by mx.kundenserver.de (node=mxeu8) with ESMTP (Nemesis), id 0MKt1w-1FfJ5401yU-0002PK ; Sun, 14 May 2006 18:04:30 +0200 Received: from cvs.zope.org (localhost.localdomain [127.0.0.1]) by mail.zope.org (Postfix) with ESMTP id 51F6E2032B4; Sun, 14 May 2006 12:04:17 -0400 (EDT) X-Original-To: zope(a)zope.org Delivered-To: zope(a)zope.org Received: from moutvdomng.kundenserver.de (moutvdom.kundenserver.de [212.227.126.249]) by mail.zope.org (Postfix) with ESMTP id 900CB20316E for <zope(a)zope.org>; Sun, 14 May 2006 12:04:15 -0400 (EDT) Received: from [212.227.126.221] (helo=mrvdomng.kundenserver.de) by moutvdomng.kundenserver.de with esmtp (Exim 3.35 #1) id 1FfJ4o-0000K3-00 for zope(a)zope.org; Sun, 14 May 2006 18:04:14 +0200 Received: from [85.181.125.181] (helo=[85.181.125.181]) by mrvdomng.kundenserver.de with esmtp (Exim 3.35 #1) id 1FfJ4o-0006X4-00 for zope(a)zope.org; Sun, 14 May 2006 18:04:14 +0200 Message-ID: <44675508.4080508(a)onlinehome.de> Date: Sun, 14 May 2006 18:04:24 +0200 From: Thomas Adams <thomas.adams(a)onlinehome.de> User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: de-DE, de, en-us, en To: zope(a)zope.org <zope(a)zope.org> Subject: [Zope] Kupu and Zope2 X-BeenThere: zope(a)zope.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Users of the Z Object Publishing Environment <zope.zope.org> List-Unsubscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=unsubscribe> List-Archive: <http://mail.zope.org/pipermail/zope> List-Post: <mailto:zope@zope.org> List-Help: <mailto:zope-request@zope.org?subject=help> List-Subscribe: <http://mail.zope.org/mailman/listinfo/zope>, <mailto:zope-request@zope.org?subject=subscribe> Sender: zope-bounces(a)zope.org Errors-To: zope-bounces(a)zope.org Envelope-To: thomas.adams(a)onlinehome.de X-Antivirus: AVG for E-mail 7.1.392 [268.5.6/338] Mime-Version: 1.0 Content-Type: multipart/mixed; boundary=------------050600020906050807090302 Hello, I want to use kupu 1.3,.5 with Zope 2.7.3 (Python 2.3.4), but I'm stuck in the given example. It seems not work: Following the steps in the example.pt and then calling http://localhost:8080/testsite/test_html/edit_kupu (test_html is of type ZPT and pure html) shows only the html, nothing else. I then tried to fill the slot in the fulleditor macro <metal:slot fill-slot="editorframe"> <iframe class="kupu-editor-iframe" id="kupu-editor" frameborder="0" scrolling="auto" src="fulldoc" tal:attributes="src document_url"> </iframe> </metal:slot> but that doesn't work as well. Does anybody has a working example how to use kupu. Thanks in advance Regards Thomas Adams Sorry, perhaps I'm flase here Does anybody knows something? Help would be appreciated. Thanks in advance Thomas _______________________________________________ Zope maillist - Zope(a)zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.5.6/338 - Release Date: 12.05.2006

1 0

Access log
by Luiz Fernando B. Ribeiro 18 May '06

18 May '06

Hi all, I am hosting several virtual hosts and I need to provide access log reports (like awstats) for my clients. I would like to know if any of the following alternatives is possible: 1. Is it possible to have diferent access log files for each virtual host? 2. Is it possible to include the "%v" (virtualhost) field in the current access log? I'm using Zope 2.6 from Debian sarge. Thanks in advance, -- Luiz Fernando B. Ribeiro Engenho Soluções para a Internet +55 11 6959-7610

7 10