- Zope - Zope lists

AW: [Zope] Sharing session information between domains
by Germer, Carsten 25 Jun '03

25 Jun '03

>From my experience, if the two machines are in the same domain it already is done. If you use cookiecrumbler the cookie seems to be set to be accessible domain-wide (if it's not already and I'm wrong, it's an easy patch). Then when you have www.mydom.com and secure.mydom.com they will both get and use the sessioncookie :) Cookiesharing with CookieCrumbler definately works when you do http://www.mydom.com/ and https://www.mydom.com/, have set that up, no problem with session consistency. Hope that helps, Carsten > -----Ursprüngliche Nachricht----- > Von: Dylan Reinhardt [mailto:zope@dylanreinhardt.com] > Gesendet: Mittwoch, 25. Juni 2003 00:14 > An: Alec Munro > Cc: zope(a)zope.org > Betreff: Re: [Zope] Sharing session information between domains > > > Ah... yes. Huge difference. Much easier. > > In this case, all I would suspect you need is a way of > recognizing that > the cookie produced by one domain should be linked to the cookie that > was produced by another. > > Probably the easiest way to do this is to include content from both > domains in one crucial page, such as the shopping cart view > page. When > that page is loaded, you can set matching domain-specific cookies that > will enable you to follow the client across domains. > > Dylan > > > On Tue, 2003-06-24 at 14:05, Alec Munro wrote: > > I realize that I forgot to mention that both the SSL and > non sites are > > running off of the same Zope instance, on the same machine. > I imagine > > your solution would probably still work, but I was hoping > that there > > would be something simpler. Thanks for the advice. > > > > Alec > > > > Dylan Reinhardt wrote: > > > > >I set up something like this that consisted of a two-way secure > > >conversation. If we label the public server X and the > secure server Y: > > > > > >1. X prepares Y for client, shares some kind of token > and/or cart id. > > >2. Client visits Y using specially constructed URL, token, etc. > > >3. Y retrieves cart securely from X each time data is needed. > > >4. Billing data entered into Y stays on Y > > >5. Y SSL-posts to X which items to mark as purchased. > > > > > >There are probably other ways to do this, but the above can be > > >implemented pretty easily with external methods and a > crypto library. > > > > > >HTH, > > > > > >Dylan > > > > > > > > > > > >On Tue, 2003-06-24 at 11:28, Alec Munro wrote: > > > > > > > > >>Hi all, > > >> > > >>I have what I'm sure is the common predicament of having > an SSL site > > >>with a different domain than the non-SSL site. In fact, I > have several > > >>domains utilizing the same domain for SSL transactions. I > need to figure > > >>out a way of sharing session information between two > domains, such that > > >>the user can move relatively freely between the domains > without losing > > >>any information. > > >>Just for an example of how this needs to work: > > >> > > >>user comes to site (session created, insecure) > > >>user adds product to shopping cart (insecure) > > >>user checks out (goes to secure site) > > >>user inputs payment info (secure) > > >>user remembers he forgot something, goes back to > catalogue (insecure) > > >>user add another product to cart (insecure) > > >>user checks out, payment information already input (secure) > > >>user submits order (secure) > > >> > > >>The important part is that the users personal information > is never > > >>transmitted insecurely, while the amount of information that is > > >>transmitted securely is kept to a minimum. > > >>This seems like a relatively common problem, so I would > appreciate any help. > > >> > > >>Thanks for your time, > > >> > > >>Alec Munro > > >>EOA Scientific Systems > > >> > > >> > > >> > > >>_______________________________________________ > > >>Zope maillist - Zope(a)zope.org > > >>http://mail.zope.org/mailman/listinfo/zope > > >>** No cross posts or HTML encoding! ** > > >>(Related lists - > > >> http://mail.zope.org/mailman/listinfo/zope-announce > > >> http://mail.zope.org/mailman/listinfo/zope-dev ) > > >> > > >> > > > > > > > > > > > > > > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://mail.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://mail.zope.org/mailman/listinfo/zope-announce > > http://mail.zope.org/mailman/listinfo/zope-dev ) > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://mail.zope.org/mailman/listinfo/zope-announce > http://mail.zope.org/mailman/listinfo/zope-dev ) >

1 0

Re: [Zope] how to use LocalFS to expose F/S directory?
by Jaroslav Lukesh 25 Jun '03

25 Jun '03

: Odesílatel: Bill Andrews <bill_j_andrews(a)yahoo.com> : Have installed (I think) LocalFS but don't understand how to expose a : : directory such as /tmp/foo within the zope URL hierarchy. I expected : to see a new file type "LocalFS portal" or something in the "Add" : pulldown menu. Select [Add Local Filesystem], fill ID : I read a message from ~a year ago by Johnathan, the LocalFS author, : saying it wasn't being kept up to date. and then directory, for example /var/log and you will see all your *nix logs. : Please advise or point me to docs - the sourceforge and zope.org : pages have no examples, and I'm not sure it's working properly. As easy as product dont need doc. JL.

4 3

Zope behind Apache
by Fejes Róbert 25 Jun '03

25 Jun '03

Hi! The answer to my question might be trivial for most of you, yet I have not found it, though I have read docs, faqs and searched even zope.org for it. So, I want only Apache users to reach Zope (port 8080) on a Linux server. Now clients can view http://192.168.161.1:8080/library/welcome.html without giving valid Apache username and password. To make matters worse, there is a separate zope.conf beside httpd.conf in my Linux. How and what to modify then? Any help is appreciated, indeed. -- Bye: FeRó //SuSE 8.0 - a foolproof OS

4 6

Re: [Zope] FYI: Weekly Product Updates (2003/06/23)
by Jaroslav Lukesh 25 Jun '03

25 Jun '03

Yeah, today is OK, but in yesterday zopesite says me that file not found. JL. ---------- Odesílatel: Jens Vagelpohl <jens(a)zope.com> underneath the big "Download" heading on that page..? On Tuesday, Jun 24, 2003, at 09:06 US/Eastern, Jaroslav Lukesh wrote: > : Odesílatel: Maik Jablonski <maik.jablonski(a)uni-bielefeld.de> > : this week again many updates for amazing Zope-Products. > > : Epoz - a cross-browser-wysiwyg-editor for Zope > : ---------------------------------------------- > : Version: 0.4.1 > : Creator: mjablonski > : Updated: 2003/06/23 14:56:02.95053 GMT-4 > : http://www.zope.org/Members/mjablonski/Epoz > > Hi, where are epoz TGZ live? ----------

1 0

Zope - SOAP service access...
by Jeffrey Hood 25 Jun '03

25 Jun '03

I am a relative newbie to Zope, and am having a lot of trouble getting the following figured out... I have a python script that accesses a SOAP service, and it runs fine with SOAPpy... there seems to be no native SOAP support in Zope, and I did find a module on the Zope site for SOAPpy integration, but there are no instructions on how to get it set up, and I don't know how to get the external methods working... I did gather that under Zope/Extensions, you are supposed to be able to put modules, but nothing that I do (putting the SOAPpy dir in there was one thing) gets anything working... I know enough about Python to get the script working under the Python interpreter, but I can't figure out how to get Zope to recognize anything but the simple examples in the tutorial... Someone must be doing SOAP calls from a Zope page, and I just need pointed in the correct direction... Any and all help is -greatly- appreciated... Thanks, JH Jeffrey Hood jhood - hmcon com

2 1

do i have to have root rights in order to install zope on linux machine?
by Jianping Zhu 25 Jun '03

25 Jun '03

I have redhat server, do i have to have root right in order to install zope on linux machine? Thanks

4 3

crystal reports
by Ramon Linan 25 Jun '03

25 Jun '03

Hi, anyone knows if there is a product that allow you to use already created crystal reports? Is also welcome advice about reporting tools to use with ODBC database connection. Thanks (very new at this)

2 1

Sharing session information between domains
by Alec Munro 24 Jun '03

24 Jun '03

Hi all, I have what I'm sure is the common predicament of having an SSL site with a different domain than the non-SSL site. In fact, I have several domains utilizing the same domain for SSL transactions. I need to figure out a way of sharing session information between two domains, such that the user can move relatively freely between the domains without losing any information. Just for an example of how this needs to work: user comes to site (session created, insecure) user adds product to shopping cart (insecure) user checks out (goes to secure site) user inputs payment info (secure) user remembers he forgot something, goes back to catalogue (insecure) user add another product to cart (insecure) user checks out, payment information already input (secure) user submits order (secure) The important part is that the users personal information is never transmitted insecurely, while the amount of information that is transmitted securely is kept to a minimum. This seems like a relatively common problem, so I would appreciate any help. Thanks for your time, Alec Munro EOA Scientific Systems

2 3

understanding hybrid products
by Fernando Martins 24 Jun '03

24 Jun '03

Hello, I'm looking at the POPMail hybrid product and converting it to ZPT. In the meantime, I'm a bit puzzled with the relation between the attributes of a Python class and the attributes of a PropertySheet of a ZClass. The zope book (extending zope) is too short on this. Namely I've in a Python file (POP.py): class POPMailAccountBase: def __init__(self, user='noname', passwd='nopass', server='noserver'): self.user = user self.passwd = passwd self.server = server and a PropertySheet (server_authentication) of the ZClass (POPMailAccount): server: string user: string passwd: string Can someone explain (or point to some doc) how is one updated from the other? For instance, when I create an instance of a POPMailAccount, the Edit screen of the PropertySheet immediately appears with the values of the Python class attributes (like above). If I modify these values in the ZMI screen, I _suppose_ the attributes of the Python class get modified. I'm not sure this is actually happening, because I had to restart Zope and only then did the product seem to work (by retrieving the messages from the server which it had no found before). Thanks, Fernando

1 0

Help pages done with zpt
by Fernando Martins 24 Jun '03

24 Jun '03

In the Zope book (Extending zope), an Help Topic is created using DTML. I don't see in no place of the ZMI a way to indicate this Help Topic is being done with a Page Template. Are there any plans to have Help Topics supporting Page Templates? Regards, Fernando

2 2