- Zope - Zope lists

RE: [Zope] LocalFS Security
by Jonathan Stoneman 09 Oct '02

09 Oct '02

> Jonathan Stoneman wrote: > > Hi, > > > > We have a Zope server that out customers can have space on. We > > provide them with an folder containing a User Folder which contains > > their user. They can then do whatever they want within this space. > > We do not want to place any un-necessary limitations on what they > > can do. > > > > The problem is that we want to install the LocalFS product on the > > server. If the customers have permissions that allow them to create > > or edit LocalFS objects, then they can access any part of the local > > file system that the zope user can. > > > > We can stop them from creating and editing LocalFS objects by > > removing the Add Local File Systems and Change Local File System > > Properties permissions from their roles in the root folder. The > > customers would then have to contact us to have a LocalFS object > > created or edited but this would be an acceptable solution. > > > > The problem with this solution is that they can change the > role that > > their user has, or change the permissions of their folder. Either > > way they can get permission to create / edit LocalFS objects. We > > could stop them from doing this by taking away their Manage Users > > and Change Permissions permissions, but this is not really > > acceptable. > > > > Is there any other way that we can install the LocalFS product and > > stop users from creating / editing instances of that object? > > > > > > Thanks... JOn > > How about modifying the localfs product to not allow arbitrary paths? > Like always prepending /home/yourlocaluseraccount/ to what > they type in, > this is the simplest method coming to my mind. Other involve > chroots and > such stuff which will get very nasty. > But you'll have to seriously think about it, because you'll have to > prevent the user from configuring LocalFS with > ../../../etc/passwd and > that stuff. > Maybe filtering out '..' should do it? > > HTH, > oliver Thanks for your help, I had actually considered doing this, but was hoping there was a simple way of doing it that I had missed. Time to start looking at the LocalFS source then.. :) Thanks again... JOn. -- Jonathan Stoneman - Programmer - Frontier Internet Services Limited Tel: 02920 820045 Fax: 02920 820038 http://www.frontier.net.uk All statements made are subject to Frontier's Terms and Conditions of Business which are available upon request.

1 0

Aquisition
by Oliver Marx 09 Oct '02

09 Oct '02

Dear List I'm looking for a folder like product where I can control the aquisition. Plone Skin has fx a path like property. Do you know of such a product? Thx for your time :) \Oliver

1 0

Re: [Zope] 2GB is still a limitation
by Jaroslav Lukesh 09 Oct '02

09 Oct '02

Extracted from mail archive: ---------- | Odesílatel: Ausum Studio <ausum_studio(a)hotmail.com> | According to Python.org, Python binaries starting from 2.2 are meant to be | LargeFile enabled for win32. Does it mean Linux binaries don't? | In any case, as we are already used to large disks, I'm among those who | think that there's currently no use that Python keeps releasing | non-LargeFile-enabled installers. Do you know why is this ? | Odesílatel: Andreas Jung <andreas(a)andreas-jung.com> | Largefile support is much better. | | -aj | ----- Original Message ----- | From: "Chris Withers" <chrisw(a)nipltd.com> | > DirectoryStorage is newer and better ;-) | > | > Chris | > | > Jaroslav Lukesh wrote: | > > Few weeks ago here somebody tell about complicated solution if data.fs | > > exceeds 2G limit. Todays I was found prevency for that situation - | > > PartitionedFileStorage | > > | > > Little old, but may be usefull. Of course your operating system MUST support files larger than 2GB. So if you use RedHat, use kernel-*-enterprise or kernel-*-bigmem REgards JL. ---------- | Odesílatel: michael.tañag <almightymike(a)yahoo.com> We're using Zope 2.5.1 and Python 2.1.3 on Linux. I was wondering if the 2GB limit of the data.fs file is still a limitation here. Is there a solution to this 2GB limit? Cause I'm sure that the we're going to reach that limit in a few months time.

1 0

Re: VirtualHostMonster (Watch out for Zope 2.6a1)
by Dag Nygren 09 Oct '02

09 Oct '02

> Is 'Localizer' a normal Folder, or an instance of some Folderish > Product? Your setup looks correct, so that's all I can think of. Localizer is the language selecting stuff, not a normal folder. But going for your version thing solved the problem ! I grepped _vh_ in the SiteAccess product and it found nothing. Checking out zope.org I noticed that there was a 2.6b1 out there. Downloaded that and lo and behold: The SiteAccess now had a test against _vh_. Moved over only that Product to my site as I am not sure how to upgrade without loosing my scurrent work. Restarted Zope and it worked !!! Seems like the 2.6a1 version for some reason dropper the _vh_ stuff.... It is there in the docs though. Anyway thankyou a lot for giving me someone to talkto about this, it helped a lot. Best from Finland Dag

1 0

2GB is still a limitation
by michael.ta�ag 09 Oct '02

09 Oct '02

hi! We're using Zope 2.5.1 and Python 2.1.3 on Linux. I was wondering if the 2GB limit of the data.fs file is still a limitation here. Is there a solution to this 2GB limit? Cause I'm sure that the we're going to reach that limit in a few months time. Thanks!! --------------------------------- Do you Yahoo!? Faith Hill - Exclusive Performances, Videos, & more faith.yahoo.com

2 1

install problem/web server compatibility
by Robert Nagle 09 Oct '02

09 Oct '02

Hi, I'm trying to install zope for the first time on my home server. I'm using the 2.6 beta in a linux rh 7.2 environment and I've installed from source. I'm not a programmer, but a technical writer who finds the zope project interesting. I need to serve static pages and my cms from the same box, and I use 2 virtual hosts in apache. I'm a bit confused about the current error message and about my options for compatibility with apache. First, I plan to run it through apache. The install document included with the zope mentions two options: PCGI and fastcgi. Another helpful document http://www.zope.org/Members/regebro/Zope_and_Apache mentions two other options: proxypass and rewrite rules and even the virtual host monster. 1. From a performance point of view, how does fastcgi compare to proxypass and rewrite? 2. I'm unclear about the order in which you need to configure apache/virtual host monster. First, you install zope, then you do "start" to verify a successful install, then you configure apache, then you restart the start script. Right? . I'm guessing that zserver will launch by default if you haven't set anything up. I'm guessing that zope will still fire up even if your settings for proxypass or rewrite are wrong. Am I right? 3. When you're troubleshooting/testing, the only way to test/verify is by trying to access it through the browser, right? Well, aside from checking apache logs, of course. Now for my main problem. I installed and started for the first time. It has started zserver, but I can't access http://webserver:8080 or 8021. The ports don't seem to be open when I netstat -an. I'm guessing we are talking about a permissions problem (see below). When I ran the install script, I gave it a user name and group name of my apache web server ( ./install -u bobbyapache -g rjapache). I unzipped it as rj2nagle (user who belongs to groups rj2nagle and webperson) I installed it as root. It gave me an admin account with a generated password, which I checked to be working correctly with zpasswd. The main zope directory is owned by root and has the group webperson, of which rj2nagle is a member. So far I have run the program as root. Here is what I see. (at the end of the normal logging after running ./start ) 2002-10-08T04:44:35 PANIC(300) z2 Startup exception Traceback (innermost last): Module __main__, line 831, in ? SystemExit: initgroups is required to safely setuid So what is going on? Thanks. Robert Nagle, Houston Texas *************************************************************************** WHEN I RUN START [root@idiotprogrammer Zope-2.6.0b1-linux2-x86]# ./start ------ 2002-10-08T04:44:29 INFO(0) zdaemon zdaemon: Tue Oct 8 04:44:29 2002: Houston, we have forked: pid 2543 ------ 2002-10-08T04:44:35 INFO(0) ZODB Opening database for mounting: '143987360_1033931574.797965' ------ 2002-10-08T04:44:35 INFO(0) ZODB Mounted database '143987360_1033931574.797965' at /temp_folder ------ 2002-10-08T04:44:35 INFO(0) ZServer HTTP server started at Tue Oct 8 04:44:35 2002 Hostname: idiotprogrammer Port: 8080 ------ 2002-10-08T04:44:35 INFO(0) ZServer FTP server started at Tue Oct 8 04:44:35 2002 Hostname: idiotprogrammer Port: 8021 ------ 2002-10-08T04:44:35 INFO(0) ZServer PCGI Server started at Tue Oct 8 04:44:35 2002 Unix socket: /usr/local/zoperj/Zope-2.6.0b1-linux2-x86/var/pcgi.soc ------ 2002-10-08T04:44:35 PANIC(300) z2 Startup exception Traceback (innermost last): Module __main__, line 831, in ? SystemExit: initgroups is required to safely setuid ***************************************************************** WHEN I RUN STOP ./stop: kill: (2540) - No such pid ./stop: kill: (2543) - No such pid total 200 I unzipped it as rj2nagle (group who belongs to groups rj2nagle and webperson) I installed it as root The main zope directory is owned by root and has the group webperson, of which rj2nagle is a member **************************************************** Permissions total 200 drwxrwxr-x 13 bobbyapa rjapache 4096 Oct 8 05:41 . drwxrwxr-x 3 root webperso 94 Sep 29 22:01 .. drwxrwxr-x 2 bobbyapa rjapache 19 Sep 24 12:33 bin drwxrwxr-x 4 bobbyapa rjapache 4096 Sep 24 12:33 doc drwxrwxr-x 2 bobbyapa rjapache 23 Sep 24 12:33 Extensions drwxrwxr-x 2 bobbyapa rjapache 75 Sep 24 12:33 import drwxrwxr-x 3 bobbyapa rjapache 22 Sep 24 12:33 include -rw-r--r-- 1 root root 0 Oct 8 04:50 inituser drwxrwxr-x 2 bobbyapa rjapache 4096 Oct 6 12:40 inst -rwxr-xr-x 1 rj2nagle rj2nagle 225 Jul 23 1999 install -rwxr--r-- 1 root root 39 Oct 6 12:39 installoptions drwxrwxr-x 4 bobbyapa rjapache 35 Sep 24 12:33 lib -rw-r--r-- 1 rj2nagle rj2nagle 2366 Nov 28 2001 LICENSE.txt drwxrwxr-x 8 bobbyapa rjapache 4096 Oct 6 12:41 pcgi -rw-r--r-- 1 root root 0 Oct 8 05:41 permissions.txt -rw-r--r-- 1 rj2nagle rj2nagle 987 Apr 29 1999 README.txt -rw-r--r-- 1 rj2nagle rj2nagle 36427 Aug 22 19:57 setup.py -rw-r--r-- 1 root root 27658 Oct 6 12:40 setup.pyc -rwxrwx--x 1 root root 640 Oct 8 04:44 start -rwxrwx--x 1 bobbyapa rjapache 658 Oct 6 13:10 start~ -rwxr-x--x 1 root root 640 Oct 6 12:56 start.original -rwxrwx--x 1 bobbyapa rjapache 75 Oct 6 12:41 stop -rw-r--r-- 1 rj2nagle rj2nagle 418 Jul 23 06:15 stupid_clean drwxrwxr-x 3 bobbyapa rjapache 4096 Oct 6 12:41 utilities drwxrwxr-xt 2 bobbyapa rjapache 156 Oct 8 05:01 var -rw-r--r-- 1 rj2nagle rj2nagle 31105 Sep 5 14:53 z2.py -rw-r--r-- 1 root root 23074 Oct 6 12:40 z2.pyc -rwxrwxr-x 1 bobbyapa rjapache 663 Oct 6 12:41 Zope.cgi -rw-r--r-- 1 rj2nagle rj2nagle 6419 Aug 14 16:11 zpasswd.py -rw-r--r-- 1 root root 6918 Oct 6 12:40 zpasswd.pyc drwxrwxr-x 4 bobbyapa rjapache 4096 Oct 6 12:40 ZServer

3 2

Test for browser version using dtml-if?
by Michael 08 Oct '02

08 Oct '02

Does anyone know how to test for browser version using <dtml-if>? I can do it with javascript, but was wondering if it is possible to just use an if statement? Michael

6 8

Re: VirtualHostMonster
by Dag Nygren 08 Oct '02

08 Oct '02

> Dag Nygren wrote: > > Object name begins with an underscore at: http://www.foo.com/subfoo/VHM/_vh_mys > > Looks like an older version of VirtualHostMonster. Ah, well. Wait, wait, don't give up on me yet :-) Where can I find a more fresh one ? BTW. I am using Zope 2.6. Does it matter ? Rgds Dag

3 2

Re: VirtualHostMonster
by Dag Nygren 08 Oct '02

08 Oct '02

> Dag Nygren wrote: > > That is what I had, with the slight diff. that I needed a proxy rule that > > didn't start > > from root on my Apache ie: > > > > ProxyPass /mysub http://localhost:8080/VirtualHostBase/http/www.foo.com:80/subf > > oo/VirtualHostRoot > > Ah, in that case you want: > > ProxyPass /mysub > http://localhost:8080/VirtualHostBase/http/www.foo.com:80/subfoo/VirtualHos… Hmm, this gives me: Zope has encountered a problem publishing your object. Object name begins with an underscore at: http://www.foo.com/subfoo/VHM/_vh_mys ub > > The "_vh_X" directly after the VirtualHostRoot inserts "X" at the start > of all generated URLs. Would have been perfect if it had worked ;-( Dag

2 1

RE: [Zope] New to zope
by sean.upton＠uniontrib.com 08 Oct '02

08 Oct '02

It should be said that some of the comments are insightful (at least worth a second read), especially when it comes to new features or API additions, etc... Sean -----Original Message----- From: Shad Young [mailto:foxwolfen@hotmail.com] Sent: Tuesday, October 08, 2002 1:11 PM To: zope(a)zope.org Subject: Re: [Zope] New to zope Thank you all, That has provided the basic help I needed :) I had tried the book before, but until Paul mentioned the talk back feature I did not notice the "com on/com off button" Now it is readable. *ROFL* *rolls up sleeves and pours himself a coffee*. "The Zope Book, Chapter 1: Introducing Zope This chapter explains what Zope is and who it's for. It describes in broad... " See you in a few days :) Cheers Shad _______________________________________________________________________ Have an article, story or essay you want to publish online? We need content. Ascendant: food for the thinking mind. http://www3.sympatico.ca/sberaud _______________________________________________________________________ ----- Original Message ----- From: "Shad Young" <foxwolfen(a)hotmail.com> To: <zope(a)zope.org> Sent: Tuesday, October 08, 2002 2:50 PM Subject: Re: [Zope] New to zope > I am a bit jargon challenged when it come to Zope and Python. Could you > please clarify ZPT? I have not come across this term yet, or if I have it is > only in the long form. What I really need right now, more than a debate on > what works best, is, as I asked in my first email, some pointers to the FM > (Fine Manual) so I can R(ead) it. ;) > > What would be the series and order of how-tos (that work) I should read to > get myself up to speed without having to spend a year trying to plod through > all this on my own? Because, so far, the reading I have done on my own, and > the examples contained there-in, do not work. Some even have basic coding > errors like missing (') in the example snippets. *boggle* > > And how do I kill the services tab and registry leftovers from an uninstall > in windows XP? XP refuses to let the keys be deleted as they correspond to > the Windows service. This should have been removed during the uninstall. > > Thanks > Shad > _______________________________________________________________________ > > Have an article, story or essay you want to publish online? We need content. > Ascendant: food for the thinking mind. http://www3.sympatico.ca/sberaud > _______________________________________________________________________ > > ----- Original Message ----- > From: "Paul Winkler" <pw_lists(a)slinkp.com> > To: <zope(a)zope.org> > Sent: Tuesday, October 08, 2002 10:08 AM > Subject: Re: [Zope] New to zope > > > > On Tue, Oct 08, 2002 at 05:15:59PM +1000, Julian Melville wrote: > > > As far as I know (and I'm no authority) ZClasses aren't really the way > to do > > > things any more. Your best bet is probably ZPT's and Python scripts, > then > > > eventually should you need to, develop Python-based products. > > > > Well, zclasses vs. zpt & python script is comparing apples and oranges... > > like saying "don't use a car, use some wheels and engines." ;-) > > > > As for zclasses being "not the way", there's some disagreement about > > this. I don't use 'em myself (lately I've been building on > > EasyProduct when I want to a new class quickly); > > others have reported problems transitioning a zclass between zope > > versions; but Dieter Maurer, who knows as much of zope as anybody, > > says he's been doing it for years without problems. > > > > --PW > > > > Paul Winkler > > "Welcome to Muppet Labs, where the future is made - today!" > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) > _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

2 1