- Zope - Zope lists

Problems after a (system) crash
by complaw＠hal-pc.org 04 Jun '01

04 Jun '01

I had a system failure that resulted in the box shutting off without properly shutting down Zope. I got the box going again, and restarted Zope. Everything appears to be fine except for Squishdot (1-0-0) which, for some bizzare reason, doesn't transmit part or all of just a few of the many images. Has anyone experienced an unscheduled shutdown and, if so, what is the proper procedure for getting things going again. I sent a message to the Squishdot people, but they haven't posted the message to the board yet. Cheers, Ron

3 2

RE: [Zope] Indexing and plaintext display gives PDF errors
by sean.upton＠uniontrib.com 04 Jun '01

04 Jun '01

I don't have a solution, but if you want to do some more digging... I think I had the same problem with the DocumentLibrary pdf converter. You may want to comment out (what I think is) the last line in lib/python/Products/DocumentLibrary/FileConverters/pdf.py (it deletes the temp pdf file), which will keep the pdf (saved in /tmp) from being deleted; you can then go in, and take a look at that file to see if it is corrupt, and compare it to the one you uploaded. I did, and that is what I found - it is not saving the entire file out... fixing it is a different story (someone else might have an answer). Sean -----Original Message----- From: Leigh Ann Hildebrand [mailto:leighann@onebox.com] Sent: Monday, June 04, 2001 2:19 PM To: zope(a)zope.org Cc: cduncan(a)kaivo.com Subject: [Zope] Indexing and plaintext display gives PDF errors I'm using Zope 2.3.2 with Python 1.5.2 running on Redhat. I don't use Python, I work in DTML. I'm cataloging technical documents. I do not use Document Library or the CMF, in part because of compatibility restrictions. (The site must support NetPositive, a non-javascript, non-CSS compatible browser.) The documents I'm indexing are html, text, Word, PowerPoint, and PDF files. I have the CMF and the Document Library product installed; I also had installed wvWare, though I'm not sure I installed it correctly. (The instructions were vague.) This is my problem. When I update my Catalog, I get a number of errors on the linux box that runs my Zope installation, related to PDF files: Error (0): PDF file is damaged - attempting to construct xref table ... Error: Top level pages is wrong type (null) Error: Couldn't read page catalog Error: Couldn't find trailer dictionary Error: Couldn't read xref table These repeat a few times, giving me two screens worth, before the index updating is complete. I can think of at least one problem that might be going on here: I think some PDF documents were added as type "DocumentFile", which is related to the DocumentLibrary stuff. Anyway, I'm trying to get rid of the errors, and be able to index the text of PDF and Word files. Suggestions? I'm forwarding this to the DocumentLibrary product engineer, too. Leigh Ann -- Leigh Ann Hildebrand leighann(a)onebox.com - email (650) 223-2199 x2231 - voicemail/fax __________________________________________________ FREE voicemail, email, and fax...all in one place. Sign Up Now! http://www.onebox.com _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

defacement/crack statistics
by kosh＠aesaeion.com 04 Jun '01

04 Jun '01

Does anyone have any statistics on how often zope servers tend to get cracked? I have been looking on line and so far I have found no data on that. Either there has not been one which is unlikely or they are extremely rare which is more likely considering the ACL system. Need some information for customers and these kinds of numbers would be very useful. Thanks Designing the webpages of tomorrow http://webme-eng.com Designing the MMORPGS of tomorrow http://worldforge.org

7 6

Re: [Zope] Zope as NT Service
by Andy McKay 04 Jun '01

04 Jun '01

Yeah it runs through a bunch of options like uninstalling any service, stopping service and so on. As I say needs to be cleaned. > Is there a connection between the "running as a service" status and DSN > problems that you know of? Nope. -- Andy McKay. ----- Original Message ----- From: "Montagne, Michael" <montagne(a)BOORA.com> To: "'Andy McKay'" <andym(a)ActiveState.com> Sent: Monday, June 04, 2001 2:54 PM Subject: RE: [Zope] Zope as NT Service > Cool. Seemed to work even tho I got a bunch of Unknown command errors. It > is up and running. However, now my ODBC DA is giving me a bad connection > string error. I'm referencing a system DSN that points to a MSAccess file. > Is there a connection between the "running as a service" status and DSN > problems that you know of? > > -mjm > > -----Original Message----- > From: Andy McKay [mailto:andym@ActiveState.com] > Sent: Monday, June 04, 2001 1:45 PM > To: Montagne, Michael; zope(a)zope.org > Subject: Re: [Zope] Zope as NT Service > > > Heres a script I use for installing Zope. Ive been meaning to clean it up > and make it friendlier, but this makes the Windows changes you need to > install Zope from say source control. It will install Zope as a Service for > you. Copy this into your Zope root. Then go: > > cd <ZopeRoot> > <ZopeRoot>\bin\python install.py -p 80 > > Where -p is the port. You must use the Zope root python because > PythonService needs to be correctly registered. > > Cheers. > -- > Andy McKay. > > > ----- Original Message ----- > From: "Montagne, Michael" <montagne(a)BOORA.com> > To: <zope(a)zope.org> > Sent: Monday, June 04, 2001 1:22 PM > Subject: [Zope] Zope as NT Service > > > > When installing zope, I chose to not run Zope as a service. Now I want to > > change my mind. How do I start Zope as a service and avoid the DOS > window? > > > > -mjm > > > > _______________________________________________ > > Zope maillist - Zope(a)zope.org > > http://lists.zope.org/mailman/listinfo/zope > > ** No cross posts or HTML encoding! ** > > (Related lists - > > http://lists.zope.org/mailman/listinfo/zope-announce > > http://lists.zope.org/mailman/listinfo/zope-dev ) > > >

1 0

Selection List Properties
by brian.r.brinegar.1 04 Jun '01

04 Jun '01

I would like to have several objects contain a multiple selection property which reference the same list. This does not work unless the object being used as the list is in the path. What I want to do is use something like: /test/list_python_script but I get a Bad Request error "No select variable test/list_python_script" is there a way to do this type of thing. Basically I want to have users select multiple things from a standard set of keywords and I want to use the same set of keywords regardless of where the object is located in the object database. Any solutions? --Brian Brinegar ECN Web Technician CEE Undergraduate Programmer MSEE 104 A 494-3106 http://www.geeksoft.net/

1 0

Re: [Zope] python script turned into a dtml document
by Luby Liao 04 Jun '01

04 Jun '01

Michael (and Chris), thank you very much for the enlightment. cheers, Luby > On 03 Jun 2001 17:42:51 -0700, Luby Liao wrote: > > > > Just noticed that, after editing two python scripts in xemacs and > > saving them, they turned into dtml documents. How do I prevent this > > from happening? cheers, Luby > > quick fix: turn off backup files for EFS. > (setq efs-make-backup-files nil) in you .emacs file should do the trick. > > long answer: whenever you save a fgile in an emacs session, emacs > renames the original file to filename.~<version>~ and creates the file > <filename>. Since Zope assumes that a newly created file is a DTML > document, all your files will be transformed into DTML Documents. > > Since there is no use for emacs version control in Zope (undo is part of > zope) and i only use EFS editing for Zope file this quick fix is okay > for me. The only correct thing to do is to make efs-make-backup-files > not only OS dependet, but also considere regexp'ing the FTP server name. > > -- > Michael Lausch > See my web page <http://www.lausch.at/> or query PGP key server for PGP > key. > "Reality is that which, when you stop believing in it, doesn't go away". > -- Philip K. Dick > Just noticed that, after editing two python scripts in xemacs and > saving them, they turned into dtml documents. How do I prevent this > from happening? cheers, Luby Turn of the 'make a backup file' option. cheers, Chris

1 0

Zope as NT Service
by Montagne, Michael 04 Jun '01

04 Jun '01

When installing zope, I chose to not run Zope as a service. Now I want to change my mind. How do I start Zope as a service and avoid the DOS window? -mjm

2 1

Method vs. Doc.
by Jason C. Leach 04 Jun '01

04 Jun '01

hi, What's the difference between a DTML method and DTML document. And what is the difference in the handling that zope does to them? Thanks, j. ...................... ..... Jason C. Leach ... University College of the Cariboo. ..

3 4

RE: [Zope] defacement/crack statistics
by sean.upton＠uniontrib.com 04 Jun '01

04 Jun '01

Typo - that's 'rm -rf /' (or if an attacker is feeling a little more benign, they'll just deface your site)... My primary security rule: you need to be root, and you need to be informed (alerts, mailing lists - set a reminder in your PIM software to check security bulletins on lwn.net every thursday afternoon, you get the idea), if you are going to manage these things... Sean -----Original Message----- From: sean.upton(a)uniontrib.com [mailto:sean.upton@uniontrib.com] Sent: Monday, June 04, 2001 12:20 PM To: jleach(a)mail.ocis.net; zope(a)zope.org Subject: RE: [Zope] defacement/crack statistics I agree: I would be nice to write a hotfix for Zope that permits a remote 'rf -rf /' command to be executed. I I could install that hotfix through-the-web, that would be even better. ;) Kidding aside, the very reasons hotfixes exist precludes the idea of TTW implementation of hotfixes in the firstplace. The only way I would think this would be acceptable is if there was a way to hard-code it only so that localhost could do this, if even that... Sean -----Original Message----- From: Jason C. Leach [mailto:jleach@mail.ocis.net] Sent: Monday, June 04, 2001 10:35 AM To: zope(a)zope.org Subject: Re: [Zope] defacement/crack statistics hi, An automated 'hotfix' management system would be a really good tool to implement in Zope. Perhaps a simple button in the Control Panel to fetch and install the latest hotfixes. j. ...................... ..... Jason C. Leach ... University College of the Cariboo. .. On Mon, 4 Jun 2001, Michel Pelletier wrote: > On Sun, 3 Jun 2001 kosh(a)aesaeion.com wrote: > > > Does anyone have any statistics on how often zope servers tend to get > > cracked? I have been looking on line and so far I have found no data on > > that. Either there has not been one which is unlikely or they are > > extremely rare which is more likely considering the ACL system. > > > > Need some information for customers and these kinds of numbers would be > > very useful. > > I've been around since the pre-Zope, and I also help do commercial support > for DC. I have never once heard from the community, or from a customer, > of any successful or unsuccessful crack of Zope. I, like you, would be > very interested to hear of one. > > Of course it can happen, there are well known exploits for older versions > of Zope, three major ones in the last year and a half, if memory serves > right. All of those exploits were fixed the same day they were reported, > often within hours, and new versions and security updates for older > versions were released, so even if there is an older version and the > maintainer patched it with a hotfix, it's safe (from the known exploit). > > Most explits (as far as I know) are discovered by community members in the > course of their experimentation with Zope. This is one of the greatest > strengths of open source. Of course, there's nothing like a full blown > security audit, but them again, there's nothing like roasting hot > dogs over large piles of burning money either. > > -Michel > > > > _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0

RE: [Zope] defacement/crack statistics
by sean.upton＠uniontrib.com 04 Jun '01

04 Jun '01

I agree: I would be nice to write a hotfix for Zope that permits a remote 'rf -rf /' command to be executed. I I could install that hotfix through-the-web, that would be even better. ;) Kidding aside, the very reasons hotfixes exist precludes the idea of TTW implementation of hotfixes in the firstplace. The only way I would think this would be acceptable is if there was a way to hard-code it only so that localhost could do this, if even that... Sean -----Original Message----- From: Jason C. Leach [mailto:jleach@mail.ocis.net] Sent: Monday, June 04, 2001 10:35 AM To: zope(a)zope.org Subject: Re: [Zope] defacement/crack statistics hi, An automated 'hotfix' management system would be a really good tool to implement in Zope. Perhaps a simple button in the Control Panel to fetch and install the latest hotfixes. j. ...................... ..... Jason C. Leach ... University College of the Cariboo. .. On Mon, 4 Jun 2001, Michel Pelletier wrote: > On Sun, 3 Jun 2001 kosh(a)aesaeion.com wrote: > > > Does anyone have any statistics on how often zope servers tend to get > > cracked? I have been looking on line and so far I have found no data on > > that. Either there has not been one which is unlikely or they are > > extremely rare which is more likely considering the ACL system. > > > > Need some information for customers and these kinds of numbers would be > > very useful. > > I've been around since the pre-Zope, and I also help do commercial support > for DC. I have never once heard from the community, or from a customer, > of any successful or unsuccessful crack of Zope. I, like you, would be > very interested to hear of one. > > Of course it can happen, there are well known exploits for older versions > of Zope, three major ones in the last year and a half, if memory serves > right. All of those exploits were fixed the same day they were reported, > often within hours, and new versions and security updates for older > versions were released, so even if there is an older version and the > maintainer patched it with a hotfix, it's safe (from the known exploit). > > Most explits (as far as I know) are discovered by community members in the > course of their experimentation with Zope. This is one of the greatest > strengths of open source. Of course, there's nothing like a full blown > security audit, but them again, there's nothing like roasting hot > dogs over large piles of burning money either. > > -Michel > > > > _______________________________________________ Zope maillist - Zope(a)zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )

1 0