- Zope - Zope lists

LoginManager and multiple UserSources
by Andy Gimblett 17 Aug '01

17 Aug '01

Gaah! Apologies for empty email preceding... Some thoughts on LoginManager and multiple UserSources... Here's LoginManager's getItem() method, which goes through the user sources, looking for an user with the right name: def getItem(self,name): # Retrieve a user with the given name, or None if no such # user exists. Uses the registry of UserSources, after # first checking for the superusSer/root users. if rootUsers.has_key(name): return rootUsers[name].__of__(self) for source in self.userSourcesList: user = source.__of__(self).getItem(name) if user is not None: return user return None This is called by a LoginMethod to retrieve a user object, which it then attempts to authenticate by calling the user object's authenticate() method. Now, what happens when you have multiple UserSources? getItem() returns the first user it finds. But it does this without attempting any authentication. So if you have two UserSources, both of which contain the same user, but for which the first won't authenticate, but the second will, you _don't_ get logged in (because getItem() just returns the first, which will fail, and the second doesn't get checked at all). Wouldn't it be "nice" if LoginManager could return multiple users from multiple sources, allowing the LoginMethod to try authenticating each, and decide for itself on whether to authenticate the user depending on the combination of results (eg you might want to authenticate provided at least one succeeds, or you might demand that they all succeed, etc.). Does this make sense to anyone else? Or am I being a complete nutcase? I should note that I don't (at this point) need this in any operational sense, I was just doing it for debugging purposes, but it strikes me that this would be an useful extension, and that one day I might well want it. Would this be a good thing? Would this be a waste of time? Is this an incredibly bad idea for some reason? Thoughts? -Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

1 0

Lotus Notes Db connectivity with Zope
by Mayer, Gottfried 17 Aug '01

17 Aug '01

Hi, Does anybody know how to incorporate Lotus Notes databases into Zope? Is there any DA already existing for Zope or does Lotus Notes perhaps support sth. like ODBC? Thanks for the help, Gottfried Mayer

4 6

LoginManager and order of UserSources
by Andy Gimblett 17 Aug '01

17 Aug '01

-- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

1 0

RE: [Zope] os.system in external method
by Andy Gimblett 17 Aug '01

17 Aug '01

> Maybe that's just me, but I found that chmod was not only 000 -> 777, > there is a forth number which does exactly that with permissions. Sounds to me like you've set the "setuid" bit. Here's a page which explains a bit more, and includes some warnings: http://www.slug.org.au/secureFEST/unixtut/unixfs-9.html > But then what is the difference between chmod 4xxx and sudo ? The main advantage of sudo is the tight control (and logging) it gives you over who has privileged access to what. It also lets to administer it centrally, with user groups, etc. It's possibly excessive for what you want to do but it's worth knowing about. -Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

1 0

LocalFS and the history tab
by Phil Harris 17 Aug '01

17 Aug '01

All, I'm using the LocalFS wotsit, and noticed that the history tab comes up on the ZMI. But, I get this traceback: Traceback (innermost last): File D:\ASPIRE~1\lib\python\ZPublisher\Publish.py, line 223, in publish_module File D:\ASPIRE~1\lib\python\ZPublisher\Publish.py, line 187, in publish File D:\ASPIRE~1\lib\python\Zope\__init__.py, line 221, in zpublisher_exception_hook (Object: deptinfo.html) File D:\ASPIRE~1\lib\python\ZPublisher\Publish.py, line 171, in publish File D:\aspire_z_server\lib\python\ZPublisher\mapply.py, line 160, in mapply (Object: manage_change_history_page) File D:\ASPIRE~1\lib\python\ZPublisher\Publish.py, line 112, in call_object (Object: manage_change_history_page) File D:\aspire_z_server\lib\python\Shared\DC\Scripts\Bindings.py, line 324, in __call__ (Object: manage_change_history_page) File D:\aspire_z_server\lib\python\Shared\DC\Scripts\Bindings.py, line 354, in _bindAndExec (Object: manage_change_history_page) File D:\aspire_z_server\lib\python\App\special_dtml.py, line 236, in _exec (Object: manage_change_history_page) File D:\ASPIRE~1\lib\python\OFS\History.py, line 187, in manage_change_history (Object: deptinfo.html) File D:\ASPIRE~1\lib\python\ZODB\FileStorage.py, line 941, in history (Object: D:\aspire_z_server\var\Data.fs) KeyError: (see above) Which is fair enough, LocalFS doesn't support History. My question is how could LocalFS be made to support History? Any takers? phil phil.harris(a)zope.co.uk

3 8

RE: [Zope] os.system in external method
by Andy Gimblett 17 Aug '01

17 Aug '01

You might want to check out the "sudo" utility, which is a very flexible way of letting users run programs as other users, in a nicely controlled fashion. http://www.courtesan.com/sudo/ It's complicated-ish, but very powerful. I'm no super-hacker, and it took me only a couple of hours (maybe an afternoon at most) to understand it sufficiently to allow one particular user to run one particular script as root, ie it's worth persevering with despite initially looking hard. Of course, there are other ways of doing the same thing, but I think this is a particularly nice one. :-) -Andy -- Andy Gimblett - Programmer - Frontier Internet Services Limited Tel: 029 20 820 044 Fax: 029 20 820 035 http://www.frontier.net.uk/ Statements made are at all times subject to Frontier's Terms and Conditions of Business, which are available upon request.

2 1

keeping sql data and catalog in sync?
by Kevin Lewandowski 17 Aug '01

17 Aug '01

I have a large SQL database and have successfully cataloged that using the nice howto on zope.org. The problem is that this database is constantly growing. What's the best way to get new data into the catalog? And how do I update catalog entries when the database changes? This database is maintained by a separate app (not Zope). I could just drop the catalog and re-create it daily but I was wondering if anyone else has faced this problem before and had any suggestions. thanks much -Kevin __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/

2 1

os.system in external method
by Philippe Jadin 17 Aug '01

17 Aug '01

Hello, I'm trying to execute an external command from an external method. Altough it works when I do it from the python console, like : $ python >>> import os >>> os.system("/usr/local/zope/instance/var/images/jpeg2swf ABALONE.JPG out.swf") It works and return 0 (under both root and my user account). btw I cannot 'su nobody' (user currently not available) for testing this as nobody. Fine. But when I try this in an external method from zope, like this : def execute(self): import os return os.system("/usr/local/zope/instance/var/images/jpeg2swf ABALONE.JPG out.swf") It returns a number : 64768 ("error code fomr the command ?) I guess it's because zope runs under nobody or something like that, but I'm not sure... Do you think there are differences between external methods and the python console beside the user running it? If not, how could I force zope to run my command as another user? I'm on freebsd. BTW, the jpeg2swf command is chmod 777 for testing purpose. What would you do ? Thanks ! Philippe

4 3

FTP Upload dies
by Carsten Burghardt 17 Aug '01

17 Aug '01

Hi there, we're using Zope 2.4.0 (with M2Crypt-SSL-Extension) and notice a problem with the FTP-Server. We start the ZServers and then try to create a new DTML-Document from a file. The first upload is successful but after that all further uploads get timeouts. Any idea? Thanks, Carsten -- Carsten Burghardt Software Developer Login & Solutions AG carsten.burghardt(a)login-solutions.de http://www.login-solutions.de Tel: +49 (0) 821 4984-106

1 0

RE: [Zope] How to know if a user already exists?
by Sylvain Boureliou 17 Aug '01

17 Aug '01

Sorry for the last empty Re: Hi Juan You can try : confirmation = "ok" for x in self.acl_users.getUserNames(): if (x==username): confirmation="error" break if confirmation=='ok': self.acl_users._addUser(username,password,confirmpass,liste_role,0) Sylvain -----Message d'origine----- De : zope-admin(a)zope.org [mailto:zope-admin@zope.org]De la part de Juan Garcia Garcia Envoyé : vendredi 17 août 2001 10:11 À : zope(a)zope.org Objet : [Zope] How to know if a user already exists? I have a form with two fields, one to write a login and the other for the password. When the anonymous user pushs the submit button I will create a new user with the id and password written. But I want to know, before doing this action, if the login already exists in the folder 'acl_users'. I tried with the function 'has_key' but it didn't work. If anyone has do it before, please send me the answer. Thank you.

2 1