- Zope - Zope lists

Stupid (I'm sure) newbie question...getting objects not in your namespace
by Andy Akins 16 Apr '02

16 Apr '02

I'm sure that if I had the time to flip through the two books I have (The Zope Book and The Book of Zope...aptly named :) ) I could find my answer...but my boss shoved Zope into my lap only recently, and is now wanting to see some results :) Is there a way to get an object that is not in the direct namespace that you are in? What I mean is: Lets say you have this: root-+--- Fie -+--- Fie1 | | | | | +--- Fie2 | +--- Fi --+--- Fi1 | | | | | +--- Fi2 | +--- Fum -+--- Fum1 | | +--- Fum2 And you are in folder Fum1.....what is the syntax to call, for example, a DTML Method in Fie2? Can it be done? Thanks... Andy Akins

2 1

Re: [Zope] Apache
by D.Rick Anderson 16 Apr '02

16 Apr '02

We don't have any transparent proxying on this firewall. It's just an IPTABLES firewall using PREROUTING portforwarding: /sbin/iptables -A PREROUTING -t nat -p tcp -d PUBLIC_IP --dport 80 -j DNAT --to PRIVATE_IP:80 It works wonderful with just Zserver and I have used it countless other places with standard Apache / PHP servers. I looked into Virtualhostmonster. Apparently you have to use that with Apache? It isn't something that you can just use with Zserver? Anywho. Anymore suggestions would be welcome. The end result is that I have to get this web server secured. Whether I use Apache on the front end, or somebody can tell me how to get M2Crypto to work on this linux box. Thanks for all your help. Rick On Tuesday 16 April 2002 12:00 pm, you wrote: > D.Rick Anderson wrote: > > Ok. I'm still having a horrible time getting Apache working in front of > > my Zope installation through the firewall. I have Zope running on port > > 8080 and Apache running on port 80. Here's my VirtualHost section: > > > > <VirtualHost 192.168.107.3> > > ServerName www.hostname.com > > ProxyPass / http://www.hostname.com:8080/domain_subdir/ > > ProxyPassReverse / http://www.hostname.com:8080 > > </VirtualHost> > > > > That's the only way I could get ProxyPass to work on the local network, > > and it works great, but only on the local network. If you try to hit it > > outside our firewall you simply get the Apache "test" page. I've also > > done: > > I'd guess that perhaps you have a transparent proxy on your firewall > which is not forwarding Host: headers. > > Sniff your traffic as it arrives at your server. My favourite quick and > dirty way of doing this is to run netcat listening on port 80 like so: > > # nc -vv -l -p 80 > > And then request a page from outside your firewall, and watch what gets > dumped to your terminal. You could alternatively use shane's tcpwatch > (do a search for it) or tcpdump or something like that to watch the > whole server - client conversation. > > > <VirtualHost 192.168.107.3> > > ServerName www.hostname.com > > RewriteEngine on > > RewriteCond %{HTTP:Authorization} ^(.*) > > RewriteRule ^(.*) /var/www/cgi-bin/Zope.cgi$1 > > [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] > > </VirtualHost> > > BTW, the 'recommended' way of doing the apache/virtualhost thing is to > use virtualhostmonsters: > > http://www.zope.org/Members/mwr/VHosts_With_Zope_Default > > or you could do it all in zope using: > > http://www.zope.org/Members/sfm/SiteAccessEnhanced > > seb > > > > > > > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) -------------------------------------------------------

2 2

_.getitem in subfolder and a dot in filename
by Milos Prudek 16 Apr '02

16 Apr '02

To call "logo.gif" stored in folder Img from DTML method in root folder I do this: <dtml-with Img> <dtml-var "_.getitem('logo.gif')"> </dtml-with> Can this be written without <dtml-with>? Note: I do not want to strip ".gif". If it wasn't for this condition, it would be easy: <dtml-var "Img.logo"> -- Milos Prudek

2 1

FYI: Abracadabra Object
by Maik Jablonski 16 Apr '02

16 Apr '02

hi to all who use the ZMI as a CMS-Interface, I've released a (maybe) helpful tool for people who use the Zope Management Interface as a Content Management System and don't want (or unable) to build a new ZClass or Python Product for everything... Abracadabra Object - http://www.zope.org/Members/mjablonski/ The "Abracadabra Object"-Product allows you to add pre-configured ZOPE-objects to your folders through the Zope-Management-Interface with only one click. **For example:** You can set up a default DTML Document with your own default text and additional properties. Or you can set up a default Folder with properties and several objects already in it. When you add an Abracadabra Object from your 'Select type to add'-list, you can select one of these default objects from a list and it will be copied with a given id and title into your current folder automagically. some people reported already, that Abracadabra Object is something they've really missed in Zope... so maybe there are others...;-) greetings, maik. -- maik jablonski http://www.sachunterricht-online.de universitaet bielefeld http://www.zfl.uni-bielefeld.de zentrum fuer lehrerbildung tlph://+49.(0).521.106.4234

1 0

Python snippets for Zope
by Jorge O. Martinez 16 Apr '02

16 Apr '02

Hi: Where would be a good place to find Python/DTML snippets for Zope to do common stuff?. I saw the http://zdp.zope.org site, but there's not much there yet; any other site around? Thanks beforehand, Jorge M. -- Jorge O. Martinez MIS Senior Associate eMediaMillWorks 1100 Mercantile Lane, Suite 119 Largo, MD 20774 E-mail => jmartinez(a)eMediaMillWorks.com Phone => (301)883-2482 ext. 105 Fax => (301)883-9754

2 2

Re: [Zope] Python snippets for Zope
by complaw＠hal-pc.org 16 Apr '02

16 Apr '02

Try ZopeLabs (http://www.zopelabs.com/) HTH, Ron > Hi: > > Where would be a good place to find Python/DTML snippets for Zope to do > common stuff?. I saw the http://zdp.zope.org site, but there's not much > there yet; any other site around? > > Thanks beforehand, > > Jorge M. > > > -- > Jorge O. Martinez > MIS Senior Associate > eMediaMillWorks > 1100 Mercantile Lane, Suite 119 > Largo, MD 20774 > E-mail => jmartinez(a)eMediaMillWorks.com > Phone => (301)883-2482 ext. 105 > Fax => (301)883-9754 > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] Tasking System
by abg＠comco-inc.com 16 Apr '02

16 Apr '02

ZShrink (http://www.zope.org/Members/codestackers/ZShrink) might fit the bill. > -----Original Message----- > From: zope-admin(a)zope.org [mailto:zope-admin@zope.org]On > Behalf Of Todd > Loomis, DMSO (SAIC) > Sent: Tuesday, April 16, 2002 2:12 PM > To: zope(a)zope.org > Subject: [Zope] Tasking System > > > All: > > Does anybody know of a system that can be used within zope to > keep track of > task. > > Thanks, > Todd > > > > _______________________________________________ > Zope maillist - Zope(a)zope.org > http://lists.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > http://lists.zope.org/mailman/listinfo/zope-announce > http://lists.zope.org/mailman/listinfo/zope-dev ) >

1 0

Apache
by D.Rick Anderson 16 Apr '02

16 Apr '02

Ok. I'm still having a horrible time getting Apache working in front of my Zope installation through the firewall. I have Zope running on port 8080 and Apache running on port 80. Here's my VirtualHost section: <VirtualHost 192.168.107.3> ServerName www.hostname.com ProxyPass / http://www.hostname.com:8080/domain_subdir/ ProxyPassReverse / http://www.hostname.com:8080 </VirtualHost> That's the only way I could get ProxyPass to work on the local network, and it works great, but only on the local network. If you try to hit it outside our firewall you simply get the Apache "test" page. I've also done: <VirtualHost 192.168.107.3> ServerName www.hostname.com RewriteEngine on RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^(.*) /var/www/cgi-bin/Zope.cgi$1 [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] </VirtualHost> and had the exact same results. You can get it just fine on the local network, but outside the firewall I get the Apache "test" page. Eventually I want to get SSL working, but I have to get this to work first. Any ideas?! Configuration: RedHat 7.1 Apache 1.3.19-5 Zope 2.4.3 There are several virtual domains on the Zope server sitting in folders using an Access Rule in the root of the Zope server and a SiteRoot in each of the domains. TIA Rick

2 1

Apache 2 Virtual Hosting
by hpinson＠indepthl.com 16 Apr '02

16 Apr '02

Does anyone have an example httpd.conf (or just the virtual hosting section) for Apache 2 virtual hosting, that works using either the ProxyPass / ProxyPassReverse or mod_rewrite methods? What works under Apache 1.x just does not seem to work (for me) with Apache 2. Harlow Pinson Indepth Learning Email: hpinson(a)indepthl.com Web: http://www.indepthl.com Voice: 505-994-2135 FAX: 208-475-7678

1 0

RE: [Zope] SECURITY: Hotfix 2002-04-15
by Granzow, Doug (NCI) 16 Apr '02

16 Apr '02

How do you install a hotfix? The README says "Hotfix products are installed just as you would install any other Zope product." which is totally meaningless to me. How do you "install any other Zope product."? How do I then confirm it is installed? Can we have some slightly more descriptive documentation, especially for something as important as hotfixes? -----Original Message----- From: Brian Lloyd [mailto:brian@zope.com] Sent: Monday, April 15, 2002 4:24 PM To: zope-announce(a)zope.org; zope(a)zope.org Subject: [Zope] SECURITY: Hotfix 2002-04-15 This hotfix addresses an important security issue that may affect some users of Zope versions 2.0 through 2.5.1 b1. The issue involves a vulnerability involving "through the web code" inadvertently allowing an untrusted user to remotely shut down a Zope server by allowing the user to inject special headers into the response. If you allow untrusted users to write "through the web" code like Python Scripts, DTML Methods, or Page Templates, your Zope server is vulnerable. We highly recommend that any Zope site have this hotfix product installed to mitigate the issue. Zope 2.5.1b2 and 2.4.4b2 as well as subsequent Zope release versions will contain a fix for the issue, at which time the hotfix can be removed. http://www.zope.org/Products/Zope/Hotfix_2002-04-15/README.txt http://www.zope.org/Products/Zope/Hotfix_2002-04-15/Hotfix_2002-04-15.tgz Brian Lloyd brian(a)zope.com V.P. Engineering 540.361.1716 Zope Corporation http://www.zope.com _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

3 2